Thank you for visiting the TROLLI website and for your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (GDPR) and the country-specific implementing laws applicable to us. This Privacy Policy provides you with comprehensive information about the processing of your personal data by Trolli and the rights to which you are entitled.
Personal data refers to any information that can be used to identify a natural person. This includes, in particular, name, date of birth, address, telephone number, email address, but also your IP address.
Anonymous data refers to data from which no personal reference to the user can be made.
Trolli GmbH
Data Protection
Oststrasse 94
90763 Fürth, Germany
T +49 911 78703-0
F +49 911 78703-1194
E-Mail: datenschutz@trolli.de
First of all, we would like to inform you about your rights as a data subject. These rights are set out in Art. 15–22 GDPR. They include:
The right to access by the data subject (Art. 15 GDPR),
The right to erasure (Art. 17 GDPR),
The right to rectification (Art. 16 GDPR),
The right to data portability (Art. 20 GDPR),
The right to restriction of data processing (Art. 18 GDPR),
The right to object to data processing (Art. 21 GDPR).
To assert these rights, please contact:
Trolli GmbH
Data Protection
Oststrasse 94
90763 Fürth
T +49 911 78703-0
F +49 911 78703-1194
E-Mail: datenschutz@trolli.de
The same applies if you have any questions about data processing in our company. You also have the right to lodge a complaint with a data protection authority.
Please note the following in connection with rights to object:
If we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling in connection with direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably by email to: datenschutz@trolli.de.
If we process your data for the protection of legitimate interests, you can object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing is necessary for the assertion, exercise or defense of legal claims.
When processing your personal data, the provisions of the GDPR, the Revised German Data Protection Act (BDSG (neu)) and all other applicable data protection regulations are observed. The legal basis for data processing results in particular from Art. 6 GDPR.
We use your data to initiate business transactions, to fulfill contractual and legal obligations, to process the contractual relationship, to offer products and services and to strengthen the customer relationship, which may also include analyses for marketing purposes.
Your consent constitutes authorization under data protection law. We are hereby informing you about the purposes of the data processing and your right of withdrawal.
We will only disclose your data to third parties in accordance with legal requirements or with your consent. Otherwise, your data will not be disclosed to third parties unless we are required to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).
Within our company, we ensure that only those persons receive your data who need it to fulfill their contractual and legal obligations.
In many cases, service providers and our departments assist them in carrying out their tasks. The necessary data protection agreements have been concluded with all service providers.
Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, if it is required by law or if you have given us your consent.
We store your data for as long as necessary to fulfill the purpose for which it was collected. Please note that a number of retention periods require data to continue to be stored. This applies in particular to retention obligations under commercial or fiscal law (e.g. German Commercial Code, German Fiscal Code etc.). If there are no further retention obligations, the data will be routinely deleted after the purpose has been fulfilled.
In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we need to use evidence within the statutory limitation period, which may be up to 30 years; the regular limitation period is three years.
We use appropriate technical and organizational security measures to protect the data we store against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. The level of security is continuously reviewed and adapted to new security standards in cooperation with security experts.
The exchange of data to and from our website is always encrypted. We offer HTTPS as the transfer protocol for our website, always using the latest encryption protocols. It is also possible to use alternative communication channels (e.g. mail).
Various personal data is necessary for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and its various features.
We have summarized the details for you in the item above. In certain cases, data must also be collected or made available due to legal requirements. Please note that it is not possible to process your request or the underlying contractual relationship without the provision of this data.
Contact form/contact by email (Art. 6(1)(a),(b) GDPR)
Which data we process depends on the context: for example, on whether you use our contact form to make an inquiry, send us an application or make a complaint.
We collect and process the following data as part of a contact inquiry (purchase information, ingredients, ideas and suggestions, image data and data protection):
Email address
Subject, message
Your IP address is also processed due to technical necessity and to ensure legal security.
If you contact us by email, we will process the personal data contained in the email only for the purpose of processing your request.
If you wish to make a complaint, the following data will be collected:
Last name, first name
Email address
Telephone number
Full address
Product name, batch number, expiry date
Reason for complaint
We do not use purely automated processing to make decisions.
Our website also contains clearly identifiable links to the websites of other companies. We have no control over the content of websites to which links are provided. Therefore, no guarantee or liability can be assumed for this content. The respective provider or operator of the websites is always responsible for their content.
At the time the links were created, the pages linked to were checked for possible violations of the law. No illegal content could be identified at the time the links were created. However, ongoing monitoring of the content of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any legal violations, we will remove such links immediately.
Our website uses cookies in several locations. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser (locally on your hard drive).
These cookies allow us to analyze how users use our websites. This allows us to tailor the content of the website to visitors’ needs. Cookies also allow us to measure the effectiveness of a particular advertisement and, for example, place based on the topics in which the user is interested.
Most of the cookies we use are session cookies. These are automatically deleted after your visit. Persistent cookies are automatically deleted from your computer when they expire (usually after six months), or you can delete them yourself before they expire.
Most web browsers automatically accept cookies. However, you can usually change your browser settings if you prefer not to send this information.
You can find out which cookies/tools we use on this website here [Cookie Policy]. This website uses technologies from etracker GmbH (www.etracker.com) to collect and store data for marketing and optimization purposes. This data can be used to create user profiles under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor’s web browser. Cookies make it possible to identify the web browser. The data collected using etracker technologies will not be used to personally identify the visitor to this website and will not be merged with personal data about the bearer of the pseudonym without the separately granted consent of the data subject. The collection and storage of data can be objected to at any time with effect for the future.
Persons under the age of 16 are not permitted to submit any personal data or consent to us without the consent of a parent or guardian. We encourage parents and guardians to be actively involved in their children’s online activities and interests. If any age verification or special child protection measures are taken, e.g. for apps, explain here or provide a separate link.
Trolli GmbH maintains a presence on social media, in this case on Facebook, Instagram, YouTube, Xing and LinkedIn. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with. Below you will find the most important data protection information regarding our pages. Name and address of the company’s data controller The data controller for the purposes of the EU General Data Protection Regulation (GDPR) and other data protection regulations is, in addition to Trolli GmbH,
(Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
(Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland)
(LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland)
(New Work SE, Dammtorstraße 30, 20354 Hamburg, Deutschland)
Youtube
(Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Irland)
However, you yourself are responsible for your use of these platforms and their features. This applies in particular to the use of interactive features (e.g. commenting, sharing, rating). Please note that your data may be processed outside the European Union. Purpose and legal basis We maintain the fan pages ourselves in order to communicate with the visitors of these pages and to inform them about our offers. We also collect data for statistical purposes in order to further develop and optimize the content and to make our offer more attractive. The data required for this (e.g. total number of page views, page activities and data provided by visitors, interactions) is processed by the social networks and made available to us. We have no control over the generation and presentation of this data. In addition, your personal data will be processed by the social network providers for market research and advertising purposes. For example, user profiles may be created based on your usage patterns and the resulting interests. This allows, among other things, advertisements to be placed inside and outside the platforms that match your interests. For this purpose, cookies are usually stored on your computer. Regardless of this, your usage profile may also include data that is not directly collected from your devices. Storage and analysis may also occur across devices, particularly, but not exclusively, if you are a registered member and logged in to the relevant platforms. We do not collect or process any other personal data. The processing of your personal data by Trolli GmbH is based on our legitimate interest in effective information and communication pursuant to Art. 6(1)(f) GDPR. If you are asked for your consent to data processing, i.e. if you give your consent by clicking a button or similar to confirm (opt-in), the legal basis for processing is Art. 6(1)(a) GDPR. Your rights/opt-out options If you are a member of a social network and do not want that network to collect data about you through our page and link it to your membership information stored on that network, you must log out of that network before visiting our fan page, delete the cookies from your device and close and restart your browser
After logging back in, however, you will once again be identifiable to the network as a specific user. Please refer to the information linked to below for a detailed description of each social network’s data processing and opt-out options:
Privacy policy: https://www.facebook.com/about/privacy/
Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy policy: https://help.instagram.com/519522125107875
Opt-out: ptout.networkadvertising.org/ and http://www.youronlinechoices.com
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/legal/cookie-policy and http://www.youronlinechoices.com
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Opt-out: http://www.youronlinechoices.com
Youtube
Privacy policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de and http://www.youronlinechoices.com
You have the following rights with regard to the processing of your personal data: right of access by the data subject; right to rectification; right to erasure; right to restrict processing; right to object; right to data portability; right to lodge a complaint about unlawful processing of your personal data with the competent data protection authority. However, since Trolli GmbH does not have full access to your personal data, you should contact the social media providers directly when asserting your rights, as they have access to the personal data of their users and can take appropriate action and provide information. If you still need help, we will of course try to assist you. Please contact datenschutz@trolli.de.
Notes on copyright and artistic copyright
If you wish to publish images, text, plans, videos, music etc. on our page, you should be aware that you may be transferring all rights of use to the network, which could ultimately have legal consequences for you if you are not the author or rights holder.
We treat all personal data as confidential. We collect, process and use data in strict compliance with the legal provisions.
1) Application process
Applicant data is reviewed by HR upon receipt of your application. Suitable applications will then be forwarded internally to the managers responsible for the relevant vacancy. If consent is required by law and we have such consent (see item 2 below), the application documents may also be forwarded to other responsible persons in other departments. Within the company, your data will only be accessed by those who require it in order to ensure the due processing of our application process. This includes members of the employee committee. In the course of system maintenance and upkeep, your data may be accessed by those responsible for this task. The persons or service providers involved are obliged to maintain data confidentiality. After completion of the application process, your application documents will be stored for a maximum of 180 days. If your application is rejected, the retention period required by the German Equal Treatment Act (AGG) will begin, such that we can contact you again if necessary or answer any follow-up questions. If you are accepted for a position as part of the application process, the data will be transferred from the applicant data system to our human resources information system. The primary legal basis is Section 26 BDSG.
If, after the application process is complete, the data is needed to pursue legal proceedings, data processing may take place in order to protect legitimate interests. Our interest in this case lies in the assertion of or defense against claims. In this case, the data will be stored for as long as is necessary for the purpose of pursuing legal proceedings. The legal basis is Art. (6)(1)(f) GDPR.
2) Consent to (a) extended storage and (b) consideration for positions in other departments and companies
We also regularly seek employees in other departments and in our affiliated subsidiaries. With your consent, we will keep your application on file for consideration for other positions that may become available at a later date. In this case, we will keep your data in our talent pool for as long as we expect to have vacancies that match your profile. Within 12 months at the latest, we will contact you by email or other means to ask if you are still interested. If you do not respond to this request within one month, we will remove you from the talent pool and delete your personal data. The legal basis is Art. (6)(1)(a) GDPR.
Note on voluntary nature of consent and the right of withdrawal
Your consent is voluntary and will not adversely affect your current application; you may withdraw your consent at any time. Please send your withdrawal to: career@trolli.de
3) Reimbursement of travel expenses
You will receive a separate form in the event of a reimbursement. Your data will only be processed for this purpose. We will store the necessary data for the period required by law. During this period (generally ten years), the data will only be processed again in the event of an audit by the tax authorities, for economic and tax audit purposes and for the investigation of possible criminal offenses. The legal basis is Art. (6)(1)(c) GDPR.
4) “Terror list” screening
The EU anti-terrorism Council Regulation (EC) No. 2580/2001 and Council Regulation (EC) No 881/2002 require that no customer, supplier, service provider or employee may belong to the group of suspected terrorists defined in centrally maintained lists (terror lists). It is therefore necessary for us to carry out a data comparison with these terror lists before concluding the respective business transaction. The legal basis is Art. (6)(1)(c) GDPR.
In accordance with the legal provisions, data subjects have the right to access information about their stored data free of charge and, if applicable, the right to rectify, block, erase, restrict or transfer such data. Your personal data will be deleted if you have exercised your right to erasure, if the data is no longer required to fulfill the purpose for which it was stored, or if its storage is inadmissible for other legal reasons, provided that this does not conflict with statutory retention obligations.
You have the right to lodge a complaint with the competent supervisory authority: Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Supervisory Office for Data Protection), Promenade 27, 91522 Ansbach, Germany.
If you have any questions about data protection or would like to send us a message to assert your right to access or erasure of your data, please use the following contact information: Trolli GmbH, Data Protection Officer, Oststrasse 94, 90763 Fürth, Germany, datenschutz@trolli.de