Privacy Policy

 

What’s this all about?

Your data is safe with us. Here, we transparently explain what information we collect, why we do it, and what rights you have.

Who we are & how to contact us

Holiroots GmbH
Paola Varela Pérez
Ziegelweg 24
73630 Remshalden
Phone: +49 176 84747502
Email: hello@holiroots.com

What data is collected – and why

  • Directly from you: e.g., via our contact form or newsletter.
  • Automatically: e.g., browser data, operating system, or time of your visit.

Why do we do this?

  • For the normal operation of the website
  • To contact you
  • To improve our offerings (for this, we obtain your consent)

Legal bases: Contract fulfillment (Art. 6 para. 1 lit. b GDPR), legitimate interest (Art. 6 para. 1 lit. f GDPR), your consent (Art. 6 para. 1 lit. a GDPR, § 25 TDDDG).

Where is our website hosted?

Our site is hosted by Cloud86 (Netherlands) – GDPR-compliant, with server locations in Europe and a DPA.

Cookies – the little helpers, if you want them

Our website uses cookies:

  • Essential: e.g., for load optimization (LiteSpeed Cache), language settings (WPML), or to save your consents (WP Consent).
  • Optional: for analytics or external services – with your consent.

Your benefit if you agree: We can continue to improve the site and offer you a more pleasant experience.

Legal bases: required – Art. 6 para. 1 lit. f GDPR; optional – your consent (Art. 6 para. 1 lit. a GDPR, § 25 TDDDG).

On Social Media: Instagram Posts on the Site

We display selected Instagram posts on our website via the Smash Balloon Instagram Feed plugin (Meta Platforms Ireland Ltd., Dublin).

Your benefit if you agree: You see our latest content directly here – without having to switch to Instagram.

Legal basis: your consent (Art. 6 para. 1 lit. a GDPR). More info: Instagram Privacy Policy.

Our Newsletter – direct updates from us

If you sign up, we’ll send you updates via email. You can unsubscribe at any time – easily with a click.

Legal basis: your consent (Art. 6 para. 1 lit. a GDPR).

External Services We Integrate

Google Maps – find our Vegetable Crackers here

We use Google Maps to show you where to find our Vegetable Crackers. Data such as your IP address may be transferred to Google.

Your benefit if you agree: You can quickly and easily find our products in stores.

Legal basis: your consent (Art. 6 para. 1 lit. a GDPR). More info: Google Privacy Policy.

Google reCAPTCHA – secure & spam-free

To keep our contact forms protected, we use reCAPTCHA.

Your benefit if you agree: Only genuine messages reach us – spam stays out.

Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR); for cookie/device access, additionally your consent (Art. 6 para. 1 lit. a GDPR, § 25 TDDDG). More info: Google Privacy Policy.

Technical Optimization & Performance

To make our website faster and more stable, we use the LiteSpeed Cache plugin. Technically necessary data, such as IP addresses within the scope of caching, may be processed.

Legal basis: legitimate interest (Art. 6 para. 1 lit. f GDPR).

Your Rights – clearly explained to you

You can at any time:

  • Receive information about stored data (Art. 15 GDPR)
  • Have errors corrected (Art. 16 GDPR)
  • Request deletion (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Request data portability (Art. 20 GDPR)
  • Withdraw consents (Art. 7 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with the supervisory authority

Security First

Our website uses SSL/TLS encryption to ensure data is transmitted securely.

In Conclusion

We want you to not only feel comfortable with us but also secure. That’s why we handle all data responsibly. If you have any questions or anything is unclear, please contact us at any time: hello@holiroots.com.

Status: September 2025