PRIVACY & COOKIES POLICY

Fat Fox Mushrooms Privacy Policy

​

We have drafted this privacy policy to explain to you, in accordance with the requirements of the UK`d Data Protection Act and the General Data Protection Regulation (EU) 2016/679, what information we collect, how we use data and what decision-making options you have as a visitor to this web site. 

 

Unfortunately, by their very nature, these explanations sound very technical, but we have tried to describe the most important things as simply and clearly as possible when drafting them.

 

The Controller

Details of the "responsible person" are:

 

Fat Fox Mushrooms Ltd 

95a Lynmouth Road, 

Walthamstow, London, 

E17 8AG, United Kingdom

 

web: https://www.fatfoxmushrooms.com 

e-mail: fatfoxmushrooms@gmail.com 

whatsapp: +447568357546

Instagram: https://www.instagram.com/fatfoxmushrooms/ 

Twitter: https://twitter.com/fatfoxmushrooms 

Facebook: https://www.facebook.com/FatFoxMushrooms/ 

 

hereinafter referred to as "we" or "us".

 

Rights of users 

With regard to the data processing described in more detail below, users and data subjects have the right to

 

• to confirmation as to whether data relating to them is being processed, 

• to information about the data processed, to further information about the data processing and to copies of the data;

• to correction or completion of incorrect or incomplete data;

• to immediate erasure of the data concerning them;

• to receive the data concerning them and provided by them and to transfer this data to other providers/controllers;

• to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection provisions.

 

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or restriction of processing that takes place. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

 

Likewise,users and data subjects have the right to object to the future processing of data concerning them, insofar as the data is processed by the provider. In particular, an objection to data processing for the purpose of direct advertising is permissible.

 

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.

 

We encourage you to get in touch if you have any concerns with how we collect or use your personal information.

 

The legal bases of processing

The legal bases for processing are listed below and at least one of these must apply whenever we process personal data:

• Consent: the individual has given clear consent to process personal data for a specific purpose.

• Contract: the processing is necessary for a contract or because you have asked us to take specific steps before entering into a contract.

• Legal obligation: the processing is necessary for us to comply with the law (not including contractual obligations).

• Vital interests: the processing is necessary to protect someone’s life.

• Public task: the processing is necessary for us to perform a task in the public interest or for official functions, and the task or function has a clear basis in law.

• Legitimate interests: the processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

 

Automatic data storage

Nowadays, when you visit web sites, certain information is automatically created and stored, including on this web site. When you visit our web site, as you are doing now, our web server (the computer on which this web site is stored) automatically records information such as

 

• the address (URL) of the web site you are visiting

• browser and browser version

• the operating system used

• the address (URL) of the previously visited page (referrer URL)

• the host name and IP address of the device from which access is made

• the date and time

• in files (web server log files).

 

As a rule, web server log files are stored for a fortnight and then automatically deleted. We do not pass on this data, but we cannot exclude the possibility that this data may be viewed in the event of unlawful behaviour.

 

Cookies

Our web site uses HTTP cookies to store user-specific data.

Below we explain what cookies are and why they are used so that you can better understand the following privacy policy.

 

Whenever you browse the internet, you use a browser. Well-known browsers include Chrome, Safari, Firefox, Internet Explorer and Microsoft Edge. Most web sites store small text files in your browser. These files are called cookies.

 

One thing cannot be denied: Cookies are really useful little helpers. Almost all web sites use cookies. More precisely, they are HTTP cookies, as there are also other cookies for other applications. HTTP cookies are small files that are stored on your computer by our web site. These cookie files are automatically placed in the cookie folder, effectively the "brain" of your browser. A cookie consists of a name and a value. When defining a cookie, one or more attributes must also be specified.

 

Cookies store certain user data about you, such as language or personal page settings. When you return to our site, your browser transmits the "user-related" information back to our site. Thanks to cookies, our web site knows who you are and offers you the setting you are used to. In some browsers each cookie has its own file, in others such as Firefox all cookies are stored in a single file.

 

There are both first-party cookies and third-party cookies. First-party cookies are created directly by our site, third-party cookies are created by partner web sites (e.g. Google Analytics). Each cookie is to be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programmes and do not contain viruses, Trojans or other "pests". Cookies also cannot access information on your PC. 

 

For more general information on cookies please visit www.allaboutcookies.org and for more details on the cookies we use please read our Cookie Policy which forms part of this Privacy Policy.

 

Wix

We use the website builder Wix of the Israeli company Wix.com Ltd, 40 Hanamal Tel Aviv St., Tel Aviv 6350671, Israel for our website. In addition to the headquarters in Tel Aviv, there are other company headquarters such as in Berlin, Dublin, Vancouver or New York. By using Wix, personal data of you may also be collected, stored and processed. 

 

Non-personal data includes technical usage information such as browser activity, clickstream activity, session heatmaps and data about your computer, operating system, browser, screen resolution, language and keyboard settings, Internet provider and date of page visit.

 

In addition, personal data is also collected. These are primarily contact data (e-mail address or telephone number, if you provide them), IP address or your geographical location.

 

Tracking systems such as cookies are used to collect data about your behaviour on our website. For example, we record which sub-pages you particularly like, how long you stay on individual pages, when you leave a page again (bounce rate) or also which preferences (e.g. language selection) you have made. Based on this data, Wix.com can also better adapt its marketing measures to your interests and user behaviour. Consequently, the next time you visit our website, you will be shown our website in the way you have set it up beforehand. Wix.com may also share personal information with third parties (such as service providers).

 

The data may be stored on different servers that are distributed around the world. For example, data may be stored in the USA, Ireland, South Korea, Taiwan or Israel. Wix always stores data until it is no longer required for the service provided. We have not yet been able to find out more details about the duration of data storage.

 

You can update, correct or delete your personal data at any time. To do so, you can also contact the data protection department at Wix directly at privacy@wix.com.

 

Online Shop

When you place an order in our online shop, we store the following information in order to fulfil the contract concluded between you and Fat Fox Mushrooms or to carry out pre-contractual measures.

 

a) Order without setting up a customer account

When placing an order in the online shop, all data necessary for execution and processing are requested by means of mandatory fields: Your full name, your e-mail address, your address (billing address and, if applicable, different delivery address). Your data will only be used to process your order.

 

b) Customer account / registration

It is also possible for you to register for your purchase at Fat Fox Mushrooms. For this purpose, you can choose a password together with your e-mail address, both of which will enable you to log in more easily without having to enter your data again when you make a purchase at a later date. Fat Fox Mushrooms stores the data you enter to set up a customer account through which your orders are recorded, executed and processed. Fat Fox Mushrooms will hold your data for further orders as long as you maintain your registration. You have the right to access, correct or delete your registration data at any time.

 

c) Retention of order data

If you submit data to Fat Fox Mushrooms for an order, your data will be stored for as long as necessary for the processing of the purchase and mandatory according to the legal retention periods. The extended storage for the fulfilment of the storage obligations is carried out according to the applicable retention periods.

 

d) PayPal

The primary payment method available in our webshop is PayPal Express.

 

PayPal is operated by PayPal (Europe) S.à r.l. & Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg as the responsible party. If you have selected PayPal Express as your method of payment, it is necessary for PayPal to transmit the following personal data to PayPal (Europe) S.á.r.l. & Cie, S.C.A. in order to process your payment:

 

• Total amount of the order

• Reference on the PayPal account.

• your e-mail address of the PayPal account. 

• Encrypted PayPal account number

• E-mail address

• First and last name

• Delivery address

 

For further information on PayPal's data protection, please visit https://www.paypal.com/uk/webapps/mpp/ua/privacy-full 

Otherwise, you can also contact PayPal (Europe) S.à r.l. & Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg directly.

 

Contacting Us

If you contact us the data you provide will be stored so that your message can be forwarded to the correct contact person. This is done in accordance with our legitimate interest to process your request. Your data provided will not be used for any other purposes, in particular not for advertising.

 

WhatsApp 

We offer visitors to our web site the possibility to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.

 

If you contact us via WhatsApp on the occasion of a specific transaction (e.g. an order placed), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with the provision of a contractual or pre-contractual measure to process and respond to your request. On the basis of the same legal basis, we may ask you to provide further data (order number, customer number, address or email address) via WhatsApp in order to be able to assign your request to a specific process.

 

If you use our WhatsApp contact for general enquiries (such as about our range of services, availability or our website), we will store and use the mobile phone number you used on WhatsApp and - if provided - your first name and surname in accordance with our legitimate interest in providing the requested information efficiently and promptly.

 

Your data will only ever be used to respond to your request via WhatsApp. It will not be passed on to third parties.

 

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of WhatsApp: https://www.whatsapp.com/legal/?eea=1#privacy-policy. 

 

Live Chat

On this website, anonymised data is collected and stored using technologies provided by Wix, for the purpose of web analytics and to operate the live chat system used to respond to live support requests. Usage profiles can be created from this anonymised data under a pseudonym. Insofar as the information collected in this way has a personal reference, the processing is carried out in accordance with our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimization purposes.

 

When you send a data subject access request 

The legal basis for the processing of your personal data in the context of handling your data subject access request is our legal obligation and the legal basis for the subsequent documentation of the data subject access request is both our legitimate interest and our legal obligation. The purpose of processing your personal data in the context of processing data when you send a data subject access request is to respond to your request. The subsequent documentation of the data subject access request serves to fulfil the legally required accountability.

 

Your personal data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the processing of a data subject access request, this is three years after the end of the respective process. You have the possibility at any time to object to the processing of your personal data in the context of the processing of a data subject access request for the future. In this case, however, we will not be able to further process your request. The documentation of the legally compliant processing of the respective data subject access request is mandatory. Consequently, there is no possibility for you to object.

 

Legal defence and enforcement of our rights

The legal basis for the processing of your personal data in the context of legal defence and enforcement of our rights is our legitimate interest. The purpose of processing your personal data in the context of legal defence and enforcement of our rights is the defence against unjustified claims and the legal enforcement and assertion of claims and rights.

 

Your personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. The processing of your personal data in the context of legal defence and enforcement is mandatory for legal defence and enforcement of our rights. Consequently, there is no possibility for you to object.

 

Sending information

We use your data for sending information ordered by you about our offer and other promotions from us to the e-mail address provided by you.

 

If you purchase goods on our website, we may send you information on our own similar goods to your specified e-mail address even without your consent. The legal basis for this data processing is our legitimate interest, because advertising related products and services by way of direct advertising represents a legitimate interest for us as the provider of this website. You may object to the processing of your personal data for the purpose of direct advertising at any time. We will then refrain from further processing for such purposes. You can send us your objection as described below. In addition, you can object to the sending of such newsletters at any time in the future without giving reasons by unsubscribing via the unsubscribe link at the end of each newsletter or by contacting us in any other way.

 

We would like you to enjoy reading our e-mails. Therefore, we try to only include content that you are likely to be interested in. We therefore measure and store opening and click-through rates in your usage profile, i.e. whether and when you open our emails, which content of the emails you click on and when, as well as whether and why our emails could possibly not be delivered. We also use this data for statistical purposes. In particular, this serves our legitimate interest to evaluate the performance of the individual newsletter campaigns and to define optimisation measures in order to make the newsletter as attractive and suitable as possible for you. The legal basis for the processing is therefore our legitimate interest.

 

Of course, you can unsubscribe from receiving our information at any time, i.e. revoke your consent with effect for the future or object to data processing. For this purpose, you will find a corresponding unsubscribe link in every mail and can confirm the unsubscription on our website. You can also contact us for a cancellation at any time.

 

Social Media

The data you enter on our social media pages, such as comments, videos, pictures, likes, public messages, etc. are published by the social media platform and are not used or processed by us for any other purpose at any time. We only reserve the right to delete content if this should be necessary. Where applicable, we share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is our legitimate interest. The data processing is carried out in the interest of our public relations and communication. 

 

If you wish to object to certain data processing over which we have an influence, please contact us. We will then examine your objection. If you send us a request on the social media platform, we may also refer you to other secure communication channels that guarantee confidentiality, depending on the response required. You always have the option of sending us confidential enquiries to our address stated in the imprint.

 

As already stated, where the social media platform provider gives us the opportunity, we take care to design our social media pages to be as data protection compliant as possible. With regard to statistics that the provider of the social media platform makes available to us, we can only influence these to a limited extent and cannot switch them off. However, we make sure that no additional optional statistics are made available to us.

 

Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. The web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we can unfortunately hardly influence the web tracking methods of the social media platform. We cannot, for example, switch this off.

 

Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits, personal relationships, preferences, etc. We have no influence on this. In this respect, we have no influence on the processing of your data by the provider of the social media platform.

 

TLS encryption with https

We use https to transmit data in a tap-proof manner on the Internet (data protection by technical design Article 25(1) of the GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission on the Internet, we can ensure the protection of confidential data. You can recognise the use of this data transmission protection by the small lock symbol at the top left of the browser and the use of the https scheme (instead of http) as part of our internet address.

 

Google Analytics

In order to tailor our web site to your needs, we create pseudonymous user profiles with the help of Google Analytics. Google Analytics uses cookies that are stored on your terminal device and can be read by us. In this way, we are able to recognize returning visitors and count them as such.

 

The data processing is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a GDPR if you have given your consent via our banners.

 

The information generated by the cookie about your use of this website  is usually transmitted to a Google server in the USA and stored there. However, as we have activated IP anonymization on this web site, your IP address will be shortened by Google beforehand. Only in exceptional cases will the full IP address be transferred to a Google server and shortened there. Where we use providers in unsafe third countries and you consent, the transfer to a third country will be based on Article 49(1)(a) of the GDPR.

 

We have also concluded a contract with Google Inc. in accordance with Article 28 of the GDPR and standard data protection clauses. Accordingly, Google will use all information strictly for the purpose of evaluating the use of our website for us and compiling reports on website activity.

 

Facebook Custom Audience

Remarketing tags of the social network Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA are integrated on our pages. These serve statistical and market research purposes. With the help of the data obtained, we can design our Facebook activities more effectively and, for example, display posts or advertisements only for visitors to our website. When you visit our pages, a direct connection is established between your browser and the Facebook server via the remarketing tags. Facebook thereby receives the information that you have visited our site with your IP address. This enables Facebook to assign the visit to our pages to your user account. We can use the information obtained in this way to display Facebook Ads.

 

We would like to point out that DH Competitions as the provider of the pages has no knowledge of the content of the transmitted data or its use by Facebook. You can find more information on this here in Facebook's privacy policy here.

 

Opt-out/opposition: If you do not want any data to be collected via Custom Audience, you can deactivate Custom Audiences globally in the Facebook settings.

 

Note: Please note that the information is stored depending on the browser used and you must call up the function separately for the mobile and stationary website.

 

Google Maps 

We use Google Maps from Google Inc. on our website. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in Europe. Google Maps enables us to better show you locations and thus adapt our service to your needs. By using Google Maps, data is transmitted to Google and stored on Google servers. Here we would like to go into more detail about what Google Maps is, why we use this Google service, what data is stored and how you can prevent this.

 

Blog

Within the Blog you may be able to display certain information, share certain details, engage with others, exchange knowledge and insights, post and view relevant content. Content and data is publicly viewable. You have choices about the information on your comment. You don’t have to provide additional information on your comment; however, comment information helps you to get more from our Services,. It’s your choice whether to include sensitive information on your comment and to make that sensitive information public. Please do not post or add personal data to your profile that you would not want to be available. The legal basis for the storage is our legitimate interest.

 

Data retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, the data processed by us will be deleted or restricted in their processing in accordance with the DPA and GDPR. If the data is not deleted because they are required for other and legally permissible purposes, their processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

 

When do we disclose your Personal Data?

We may share your information with organisations that help us provide the services described in this policy and who may process such data on our behalf and in accordance with this policy, to support our online offer and our services. If you wish to learn more about how the relevant provider process your personal data, please follow the link embedded in the above mentioned providers name. 

 

Typically and unless otherwise stated in this policy, data may be shared on the basis of our contractual and pre-contractual obligations. Equally, if you have consented to it, or where there we have a legal obligation to do so or on the basis of our legitimate interests (e.g. when using agents, hosting providers, tax, business and legal advisors, customer care, accounting, billing and similar services that allow us to perform our contractual obligations, administrative tasks and duties efficiently and effectively).

 

In relation to meta data obtained about you, we may share a cookie identifier and IP data with analytic service providers to assist us in the improvement and optimisation of our website which is subject to our Cookie Policy.

 

We may also disclose information in other circumstances such as when you agree to it or if the law, a Court order, a legal obligation or regulatory authority ask us to. If the purpose is the prevention of fraud or crime or if it is necessary to protect and defend our right, property or personal safety of our staff, the website and its users.

 

Children Data

Our website is not intended for children and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us and we take the necessary steps to remove that information from our server.

 

International transfers

We do not transfer your personal data outside the European Economic Area (EEA).

 

Changes to our privacy policy

We reserve the right to adapt this privacy policy so that it always complies with the current legal requirements or in order to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

 

Questions

If you have any questions about data protection, please write us an e-mail or contact us using the details provided on the website.