Jungle-Harvest

Privacy notice.

1. Controller and contact

This notice applies to jungle-harvest.com, the website of the Jungle-Harvest brand. The controller responsible for processing personal data is:

If you have questions about data protection or wish to exercise your rights, contact us at support@jungle-harvest.com.

2. Visiting the website and hosting

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, technically necessary connection data is processed, in particular your IP address, time of access, requested address, amount of data transferred, status code, browser and operating system information and, where applicable, the page visited immediately beforehand.

This is necessary to deliver the website, identify errors and defend against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure and functional website. Technical data is stored only for as long as necessary for the relevant security or error-analysis purpose. In the event of a specific security incident, longer storage may be necessary to investigate it and pursue legal claims.

3. Contact by email or form

If you email us or use the contact form, we process your email address, name, selected subject and message to handle your enquiry. The message is sent only to support@jungle-harvest.com. Your email address is used as the reply-to address. No automatic copy is sent to you. For an enquiry about a contract or its formation, the legal basis is Article 6(1)(b) GDPR. We handle other enquiries under Article 6(1)(f) GDPR, based on our interest in responding appropriately to your message.

Providing this information is voluntary; without a reachable contact address and the information needed to deal with your enquiry, we may be unable to reply. Messages are deleted once the matter has been resolved, unless statutory retention duties or the need to establish or defend specific claims require further storage.

Form messages are not additionally stored in the WordPress database. To prevent misuse, the form uses a hidden verification field, a security token and short-term sending limits. A salted hash of the IP address is used for this purpose; the counters created for this are scheduled for deletion after two minutes and are removed during the next relevant WordPress cron run. The legal basis is Article 6(1)(f) GDPR, our interest in preventing spam and abusive submissions.

4. WordPress, cookies and locally hosted fonts

The website uses WordPress and WooCommerce. Basket and session cookies keep your selected items and current checkout together. WordPress also uses login and security cookies for authorised administrators. Technically necessary access to information stored on your device is based on section 25(2) TDDDG; the subsequent processing of personal data is based on Article 6(1)(f) GDPR for the secure administration of the website.

The shop design’s fonts and product images are loaded from our own web server. Google Analytics is loaded only after you consent; details are provided in the “Statistics” section. Google advertising features, reCAPTCHA and embedded Google Maps are not configured. External sources are ordinary links: our website is not left until you open a link. We do not have a newsletter or public comment or review forms.

4a. YouTube videos after your consent

Some pages show videos by Sebastian Freidank on the GUYA channel. Preview images are loaded from our own web server. The player is embedded via youtube-nocookie.com only when you select “Load YouTube video”. Before then, the video feature does not connect to YouTube or Google.

By loading the video, you consent to the connection to YouTube and the associated processing of data. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the video is retrieved, Google receives in particular your IP address, browser and device information, and information about the video request. If you are signed in to a Google account, Google may associate the visit with your account. Processing in the United States is possible.

We use YouTube’s enhanced privacy mode. According to YouTube, this limits personalisation through embedded videos but does not prevent data being transferred when the video is loaded. The legal basis for our embedding is your consent under Article 6(1)(a) GDPR and, insofar as information is stored on or accessed from your device, section 25(1) TDDDG.

Your choice applies only to the particular video on the page you have opened and is not stored permanently by us. Reloading the page removes the player and ends further requests through this embed. Data already transmitted is not recalled; the lawfulness of processing carried out before withdrawal remains unaffected. You must make a new choice the next time you load the video. More information about Google’s processing, retention periods, international transfers and settings is available in the Google Privacy Policy and YouTube Help on enhanced privacy mode.

4b. Statistics with Google Analytics after your consent

If you select “Allow statistics”, we use Google Analytics 4 to understand and improve the use of our shop. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Without your consent, the Google tag is not loaded and the statistics feature sends no data to Google.

After you consent, information collected includes pages viewed, browser and device information, a pseudonymous cookie identifier, product views, basket changes, checkout steps and confirmed orders. An order event includes the order reference, items, quantities, payment method, order value, tax and delivery charges. We do not transmit names, email addresses, postal addresses, payment credentials or order keys with these statistics events. URL query parameters are removed for our page measurement. We may associate the order reference with an order.

When a connection is made, Google also technically receives your IP address; according to Google, IP addresses are not logged or stored in Google Analytics 4. Processing in the United States is possible. Information about Google’s data processing and international transfers is available in the Google Analytics privacy information and Google data processing terms. We do not enable Google Signals or personalised advertising.

The legal basis is your consent under Article 6(1)(a) GDPR and, for storing or accessing information on your device, section 25(1) TDDDG. You can reject statistics at any time using “Statistics settings” at the bottom of the page and withdraw your consent for the future. Your shopping experience remains unchanged if you do not consent.

We store your choice in local browser storage for up to six months. After consent, Analytics cookies may be set with a lifetime limited by us to a maximum of six months; we also store confirmed order references locally for up to six months to avoid counting purchases more than once. When you withdraw consent, we remove our website’s Analytics cookies and this local list. Google’s retention of event data already collected depends on the Analytics property settings; withdrawal ends future measurement and does not affect the lawfulness of earlier processing. Information about exercising your rights is set out below.

5. Recipients and access permissions

Access is granted only to people who need it to administer the website or handle your enquiry, and to the hosting and IT service providers engaged for these purposes. Data is disclosed to public authorities where there is a legal obligation, on the basis of Article 6(1)(c) GDPR.

6. Orders, payment and delivery

When you place an order, we process your name, email address, billing and delivery addresses, selected items, quantities, prices, and order, payment and delivery status. A telephone number is optional. This information is used to process your order, allocate payment, issue invoices, deliver the goods and communicate with you. The legal basis is Article 6(1)(b) GDPR. Information marked as required in the order form is necessary to conclude the contract.

Orders are processed in WooCommerce and our central order and invoicing system. The warehouse and delivery service provider engaged to fulfil your order receive the delivery and order details they need. We also use order and tracking data for order, payment and dispatch confirmations and to handle cancellations and returns. Internal order copies are available only to people responsible for processing orders.

If you choose to pay through Stripe or PayPal, the order and transaction data required for payment is sent to the payment provider you selected. You enter your payment details on its payment page. We receive the payment status and transaction details needed to allocate the payment. For bank transfers, we process the payment reference and information received with the payment to allocate it to your order. Details of each payment provider’s own data processing, international transfers and your rights are available from Stripe and PayPal.

We retain invoice and accounting data to meet statutory obligations, on the basis of Article 6(1)(c) GDPR. After the contract has been completed and the applicable retention periods have expired, data is deleted unless it is still needed to establish or defend claims.

7. Establishment in Canada and international processing

The controller responsible for processing is GFY BABILON LLP, named above, which is based in Canada. If you have questions about the processing of your data or international data transfers, contact support@jungle-harvest.com.

8. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal.

Right to object: If processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to processing for direct marketing at any time and without giving reasons.

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. To exercise your rights, simply email support@jungle-harvest.com.

We do not make decisions on this website based solely on automated processing that produce legal or similarly significant effects, and we do not carry out corresponding profiling.