Privacy Policy

§ 1 General Information

§ 1 General Information In this privacy policy you will find detailed information about what happens with your personal data when you visit our website www.o-cycle.de. All data that enables your personal identification constitutes personal data. In processing your data, we strictly comply with legal requirements, in particular the General Data Protection Regulation (“GDPR”). It is very important to us that your visit to our website is completely secure.

§ 2 Responsible Entity

§ 2 Responsible Entity Name: Passion Foods GmbH Represented by: Sascha Postel, Managing Director Address: Gartenstraße 13, 82234 Weßling Country: Germany Email: info@o-cycle.de Tel.: +49 8153 937985-0

§ 3 Data Protection Officer

§ 3 Data Protection Officer Name: Sascha Postel Address: Gartenstraße 13, 82234 Weßling Country: Germany Email: sascha@o-cycle.de Tel.: +49 8153 937985-0 You may contact our Data Protection Officer at any time with questions or suggestions regarding data protection.

§ 4 Access Data (Server Log Files)

§ 4 Access Data (Server Log Files) When you visit our website, we automatically collect access data transmitted by your browser and store it in so-called server log files. This includes: • Browser type and version of your PC • Operating system used by your PC • Referrer URL (source from which you accessed our website) • Hostname of the accessing computer • Date and time of the server request • IP address currently used by your PC (anonymised where possible) It is generally not possible for us, nor is it our intention, to assign this data to a specific individual. Processing of this data is carried out in accordance with Art. 6(1)(f) GDPR to preserve our legitimate interest in improving the stability and functionality of our website.

§ 5 Cookies

§ 5 Cookies We use so-called cookies to make your visit to our website more attractive and to enable the use of certain functions. These are small text files that are stored on your device. Cookies are not able to execute programmes or transmit viruses to your computer system. Necessary cookies required for electronic communication or the provision of desired functions are stored in accordance with Art. 6(1)(f) GDPR. Our legitimate interest in storing them serves the technically flawless and optimised provision of our services. We primarily use so-called “session cookies”, which are automatically deleted when your visit ends. In addition, we use cookies that remain stored on your device until you remove them yourself. You can configure your browser to notify you when cookies are about to be set. You can then decide whether to allow cookies on a case-by-case basis, whether to allow cookies for certain cases, or whether to reject cookies in general. You can also set cookies to be automatically deleted when you close the browser. Please note that the functionality of this website may be limited if you disable cookies.

§ 6 Web Analysis & Advertising Tools

A. Google Analytics We use the web analysis service Google Analytics version Google Analytics 4 on our website. This is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies” – text files stored on your computer that enable analysis of your use of our website. Within Google Analytics, all data from devices located in the EU is initially captured via domains and servers within the EU before the data traffic is forwarded to the Analytics servers for further processing. Processing of your data is based on the consent you have given via the cookie consent tool (in accordance with Art. 6(1)(a) GDPR).

a. IP Anonymisation / IP-Anonymisierung

On our website, IP anonymisation for Google Analytics is automatically activated. Your IP address is truncated within the EU or EEA before it is transmitted to Google in the USA. Only in exceptional cases will the full IP address be transmitted and truncated there. Google uses this information on our behalf to evaluate your website usage, create activity reports, and provide other services related to website and internet usage. According to Google, IP addresses are neither logged nor stored in Google Analytics, but are only briefly processed for geolocation and immediately deleted. Your IP address will not be combined with other Google data.

b. Demographic Features / Demografische Merkmale

Our website uses the “Demographic Features” function of Google Analytics to obtain information about the age, gender and interests of site visitors. The data used for this purpose is based on interest-based advertising by Google and visitor data from third-party providers. Assignment of data to individual persons is excluded. You can deactivate the use of this function at any time via your Google ad settings, and also prohibit the collection of your data by Google Analytics in general in accordance with the section “Objection to Data Collection”.

c. Google Signals

In addition to Google Analytics, our website also uses Google Signals. This service enables Google to generate cross-device usage reports (“Cross-Device Tracking”). If you have activated personalised ads in your Google account and linked your devices to your account, Google can analyse your usage behaviour across different devices, provided you have consented to the use of Google Analytics (Art. 6(1)(a) GDPR). We do not receive any personal data in this process, only statistics. You can deactivate personalised ads in your Google account, thereby preventing cross-device tracking via Google Signals.

d. Order Processing / Auftragsverarbeitung

We have concluded a data processing agreement with Google and strictly adhere to the stringent requirements of the German data protection authorities when using Google Analytics.

e. Retention Period / Speicherdauer

Data at user and event level stored by Google and linked to cookies, user identifiers (such as User ID) or advertising IDs (such as DoubleClick cookies or the Android advertising ID) will be deleted after 2 months.

f. Right of Withdrawal / Widerrufsrecht

Many data processing procedures require your express consent. If the processing of your data is based on your consent, you have the right to withdraw it at any time with effect for the future in accordance with Art. 7(3) GDPR. To do so, simply change your selection in the cookie settings. Such a withdrawal does not affect the legality of data processing that took place prior to the withdrawal on the basis of your consent. The storage of data for billing and accounting purposes remains unaffected by this withdrawal.

B. Google Tag Manager

B. Google Tag Manager Our website uses Google Tag Manager (provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Google Tag Manager is a solution that enables marketers to manage website tags via a single interface. Google Tag Manager itself is a cookie-free domain and does not store any personal data. It merely triggers the activation of other tags, which in turn may potentially collect data. However, Google Tag Manager does not access this data. Any deactivation carried out at domain or cookie level applies to all tracking tags implemented via Google Tag Manager.

C. Google Ads & Conversion Tracking

C. Google Ads & Conversion Tracking This website uses Google Ads (formerly Google AdWords), an online advertising service by Google. Google Ads allows us to use advertising materials on external websites to draw attention to our offerings and to analyse the effectiveness of our advertising measures. The aim is to present you with interesting advertisements, to optimise the website, and to ensure a fair calculation of advertising costs. We use Conversion Tracking within Google Ads to measure the effectiveness of our advertising campaigns. Google delivers ads via so-called “AdServers”. AdServer cookies are used, which record certain metrics such as ad impressions or clicks. When you click on a Google ad, a conversion tracking cookie is stored in your browser. These cookies are small text files that expire after 30 days and do not serve your personal identification. They merely enable Google to recognise your browser. If you visit certain pages of our website within this period, both Google and we can determine that you arrived at our page via the advertisement.

D. Google Remarketing

D. Google Remarketing This website uses Google Remarketing in combination with the cross-device functions of Google Ads and Google DoubleClick. Google Remarketing analyses your user behaviour on our website to classify you into relevant advertising target groups. This allows us to display appropriate advertising messages to you when you visit other websites on the internet (remarketing / retargeting). By linking Google Remarketing target groups with Google’s cross-device functions, we can display personalised advertising messages based on your previous usage behaviour across different devices. If you have given your consent, Google links your web and app browsing history with your Google account to ensure that you receive the same personalised advertising messages on all devices with which you log into your Google account. You can deactivate personalised advertising in your Google account via the following link: https://www.google.com/settings/ads/onweb/

E. Google AdSense

E. Google AdSense Our website uses Google AdSense, a service by Google for placing advertisements. Google AdSense uses so-called “cookies” – text files stored on your computer – which enable personalised, interest-based advertising tailored to the content of our website. In addition, Google AdSense uses so-called Web Beacons (invisible graphics), which allow visitor traffic on our pages to be statistically analysed for online marketing purposes. The information generated by cookies and Web Beacons about your use of our website (including your IP address) and the delivery of ad formats is transmitted to a Google server in the USA and stored there. Google may share this information with third parties. However, Google will not combine your IP address with other data you may have stored. If you have given your consent, the storage and processing of your personal data takes place on the basis of this consent in accordance with Art. 6(1)(a) GDPR. You have the option of preventing the installation of cookies through a corresponding setting in your browser. However, please note that in this case you may not be able to use all functions of this website to their full extent.

§ 7 Contact Form

§ 7 Contact Form When you contact us via email or contact form, the data transmitted, including your contact details, will be stored in order to process your enquiry and to be available for any follow-up questions. This data will not be passed on to third parties without your express consent. Processing of the data submitted via the contact form is carried out exclusively on the basis of the consent you have given in accordance with Art. 6(1)(a) GDPR. Withdrawal of this consent is possible at any time without giving reasons. An informal notification via email to us is sufficient for withdrawal. The data transmitted via the contact form will be stored by us until you request its deletion, withdraw your consent to storage, or the need for data storage ceases to exist. Statutory retention periods remain unaffected.

§ 8–10 Comments & Subscriptions

§ 8 Retention Period of Comments We store both user comments and the associated data, including IP addresses. This data is stored until the comment is either removed by the user themselves or a legal obligation to delete arises.

§ 9 Subscribing to Comments After registering on our website, you can use the option to subscribe to comments. For this purpose, we use a double opt-in procedure, in which you receive a confirmation email to verify your email address. You can unsubscribe from comment notifications at any time via a link in the corresponding notification emails. The data collected for setting up the subscription will be deleted after unsubscription. The storage of your comments is based on your consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time without giving reasons.

§ 10 User Account Creating a user account requires your consent to the storage of your basic data (name, address, email address) and your login credentials (username, password). This data enables you to log in to our website using your email address and password.

§ 11 Use & Disclosure of Data

§ 11 Use & Disclosure of Data We assure you that personal data communicated to us, e.g. via email (such as your name, address or email address), will not be sold or otherwise used commercially for third parties. Your data will be processed exclusively for the purpose of correspondence with you and to fulfil the purpose for which you provided it to us. In the context of payment processing, your payment details will be forwarded to the commissioned credit institution. The protection of your personal data is important to us. We therefore do not disclose your data to third parties as a rule, unless there is a legal obligation to do so or you have given us your express consent.

§ 12 Encryption (SSL/TLS)

§ 12 Encryption (SSL/TLS) Our website uses SSL / TLS encryption to ensure the security and protection of the transmission of confidential information. This particularly concerns requests that you, as a website visitor, send to us as the operator. An encrypted connection can be recognised by the “https://” in the address bar of your browser as well as the lock symbol in your browser toolbar. Activating SSL / TLS encryption means that the data you send to us cannot be read by unauthorised third parties.

§ 13 Retention Period

§ 13 Retention Period Your personal data transmitted to us via our website will only be stored for as long as necessary to achieve the respective purpose of the data processing. In accordance with commercial and tax law retention obligations, however, the storage of certain data may last up to 10 years.

§ 14 Your Data Protection Rights

§ 14 Your Data Protection Rights As a data subject, you have, in accordance with statutory provisions, the following rights vis-à-vis the controller regarding your personal data:

A. Widerrufsrecht / A. Right of Withdrawal

Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to withdraw this consent at any time with effect for the future in accordance with Art. 7(3) GDPR.

B. Auskunftsrecht / B. Right of Access

In accordance with Art. 15 GDPR, you have the right to request confirmation from us as to whether we are processing your personal data.

C. Recht auf Berichtigung / C. Right to Rectification

You have the right to request the correction of inaccurate personal data concerning you and/or the completion of incomplete data at any time in accordance with Art. 16 GDPR.

D. Recht auf Löschung / D. Right to Erasure

You have the right to request the erasure of your personal data in accordance with Art. 17 GDPR, where one of the legally specified grounds applies.

F. Recht auf Unterrichtung / F. Right to Information

If you exercise your right to rectification, erasure or restriction of processing of your personal data, we are obliged to inform all recipients in accordance with Art. 19 GDPR.

G. Protection against Automated Decision-Making (Profiling)

In accordance with Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling.

H. Recht auf Datenübertragbarkeit / H. Right to Data Portability

You have the right under Art. 20 GDPR to receive the data you have provided to us in a structured, commonly used and machine-readable format.

I. Right to Object

If we process your personal data on the basis of a balancing of interests in accordance with Art. 6(1)(f) GDPR, you have the right to object to this processing at any time.

J. Right to Lodge a Complaint with the Supervisory Authority

In the event of infringements of the GDPR, you have the right to lodge a complaint with a competent supervisory authority.

Supervisory Authority 

Bavarian State Office for Data Protection Supervision Promenade 18 91522 Ansbach Postal address: PO Box 1349, 91504 Ansbach Telephone: 0981/180093-0 Email: poststelle@lda.bayern.de Website: https://www.lda.bayern.de

§ 15 Validity & Amendment

§ 15 Validity & Amendment of this Privacy Policy This privacy policy comes into force on 01.01.2026. We reserve the right to amend this statement as needed and in compliance with applicable data protection laws. This may, for example, be necessary to comply with new legal requirements or to take account of changes to our website or new services offered via our website. The current version of the privacy policy available on our website at the time of your visit is binding. In the event of changes to this privacy policy, we will publish them on this page to keep you fully informed.