We collect and process your personal data in accordance with all applicable data protection laws and regulations, including, without limitation, the Virginia Consumer Data Protection Act (VCDPA) as well as in accordance with the General Data Protection Regulation of the European Union (GDPR).
Who controls the processing of my personal data? Who is accountable for it?
Data processing on this Services is carried out by:
VA Harvest, LLC.
6407 Mallory Dr, Richmond, VA 23226 USA
You can contact us at any time regarding this and other questions on the subject of data protection using our contact form.
How do we collect your data?
Data is collected either by you providing it to us, for example, the data that you enter in our contact form. Or data that is collected automatically or with your consent by our IT systems when you visit and use our Services.
What do we use your data for?
Some of the data is collected in order to ensure error-free provision of the Services. Other data may be used to analyze your user behavior.
Automatic Collection of Data
Log Files and Cookies
The processing of your personal data when you merely visit and consult the Services is limited to the so-named surfing data, namely the data whose transmission to the Services is implicit in the functioning of the systems in charge of the managing of the Services and in the communications protocols peculiar to the Internet. Surfing data are, for example, the IP addresses of the devices you use to connect to the Services and other parameters relating to your device and operating system.
In principle, surfing data, such as these above specified, and for example the number of visits
and the time spent on the Services, are collected and processed by us exclusively for statistical purposes and in aggregated form for purposes of measuring and enhancing the functioning of the Services. Due to the nature itself of surfing data, these data may lead to identification of users if they are associated with data held by third parties; however, we do not collect surfing data in order to associate them with identified users, except where said data may be used for purposes of assessing possible responsibilities in case of information crimes realized against the Services or through the Services to the extent permitted by law.
Data you provide to us
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on the provision of a pre-contractual or contractual measure if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us or on your consent if this has been requested.
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your inquiry). Mandatory legal provisions - in particular retention periods - remain unaffected.
In order to establish or implement the contractual relationship with our customers, it is regularly necessary to process the personal master, contract, and payment data provided to us. We also process customer and prospect data for evaluation and marketing purposes. This processing is carried out on the legal basis of our legitimate interest and serves our interest in further developing our offer and informing you specifically about our offers. Further data processing may take place if you have consented or if this serves the fulfillment of a legal obligation.
Placing an Order
If you make a purchase in our online shop and thus conclude a contract with us, we process the data required for the conclusion, performance or termination of the contract with you. For this purpose, we also collect the following data:
First name, last name
for companies additionally: company name
Password (at least eight characters)
Transaction data (goods, price, place and time of the transaction).
Payment data (transaction data of the payment providers).
You provide us with the data on the basis of the respective contractual relationship (e.g., management of your customer/user account, processing of a purchase contract) between you and us. We are also obliged to process your e-mail address in the event of a purchase and to send an electronic order confirmation.
Insofar as we do not use your data for advertising purposes, we store the data collected for contract processing for the duration of the contract as well as until the expiry of the statutory or possible contractual warranty and guarantee rights. After the expiry of this period, we retain the information of the contractual relationship required by commercial and tax law for the periods determined by law. For this period, the data will be processed again solely in the event of an audit by the tax authorities.
The following data processing is also required for the execution of a purchase contract via our website:
Your payment data will be passed on to payment service providers commissioned by us to process the payment(s). We pass on details of your delivery address to logistics companies and shipping partners commissioned by us. In order to ensure that the goods are delivered in accordance with your wishes, we transmit your e-mail address and, if applicable, telephone number to the logistics company and/or shipping partner commissioned by us to carry out the delivery. If necessary, they will contact you in advance of the delivery in order to coordinate the details of the delivery with you. The respective data will be transmitted solely for the respective purposes and deleted again after delivery has taken place.
How your data is handled
Sharing of your data
We may share your information with organizations that help us provide the services described in this policy and who may process such data on our behalf and in accordance with this policy, to support our online offer and our services.
Typically, and unless otherwise stated in this policy, data may be shared on the basis of our contractual and pre-contractual obligations. Equally, if you have consented to it, or where there we have a legal obligation to do so or on the basis of our legitimate interests (e.g., when using agents, hosting providers, tax, business and legal advisers, customer care, accounting, billing
and similar services that allow us to perform our contractual obligations, administrative tasks and duties efficiently and effectively). If we commission third parties to process data on the basis of a so-called "processing agreement".
In relation to meta data obtained about you, we may share a cookie identifier and IP data with analytic service providers to assist us in the improvement and optimization of our website which is subject to our Cookies Policy.
We may also disclose information in other circumstances such as when you agree to it or if the law, a Court order, a legal obligation or regulatory authority ask us to. If the purpose is the prevention of fraud or crime or if it is necessary to protect and defend our right, property or personal safety of our staff, the website and its users.
Storing your data
We store your data as long as it is needed for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to retention obligations under commercial or tax law. If there are no further storage obligations, the data will be routinely deleted after the purpose has been achieved.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the Services operator, this Services uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
What else do I need to know about data protection at VA Harvest?
We take data protection very seriously and work according to the minimal principle. The personal data we ask for, store and process in the context of our services including the website is based on the legal requirements for data management. We collect as little information as possible from website visitors. However, we would like to constantly optimize our website in order to offer you a good user experience and the greatest possible information content.
Virginia Specific Rights
According to the Virginia Consumer Data Protection Act, you have the right to:
Confirmation whether your personal data is being processed by us;
Correct inaccuracies in your data;
Delete personal data obtained from or about you;
Obtain a copy of the data you previously provided us in a portable and “readily usable” format; and
Opt-out of data collection if the data is collected “for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects concerning on you.
If you wish to rely on any of your data subject rights or have a request, please contact us.
Do Not Track
Do Not Track is a privacy preference you can set in most browsers. We support Do Not Track because we believe that you should have genuine control over how your info gets used and our
site responds to Do Not Track requests.
Do Not Sell My Personal Information
We do not sell information that directly identifies you, like your name, address, banking information, or phone records. In fact, we do not even share that type of information except with service providers who can use the information solely to provide a service on our behalf, when a consumer directs us to share the information. If applicable, you can choose whether you want this sharing or not. Remember, we don’t sell data that directly identifies you unless we have your explicit permission, no matter what choice you make. To make your choices please contact us.
GDPR Specific Rights
You have the following rights with regard to the personal data concerning you:
Right to information,
Right to correction or deletion,
Right to restriction of processing,
Right to object to processing,
Right to data portability.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21 para. 2 GDPR).
Right of appeal to the competent supervisory authority
In the event of breaches, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done insofar as it is technically feasible.
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, the right to correction or deletion of this data. You can contact us at any time with regard to this and any other questions you may have on the subject of personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
If you have lodged an objection under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest.
Objection to advertising e-mails
The use of contact data published within the framework of the imprint obligation for the purpose of sending advertising and information material not expressly requested is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.
Miscellaneous and Closing
We do not use automated decision-making or profiling.
Do Not Track
Do Not Track is a privacy preference you can set in most browsers. We support Do Not Track because we believe that you should have genuine control over how your info gets used and our Services responds to Do Not Track requests.
It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.
Our website is not intended for children, and we do not knowingly collect data relating to children. If you become aware that your Child has provided us with Personal Data, without parental consent, please contact us, and we take the necessary steps to remove that information from our server.
Our website contains links to the online offers of other providers. We hereby point out that we have no influence on the content of the linked online offers and the compliance with data protection regulations by their providers.
Queries and Complaints
Any comments or queries on this policy should be directed to us. If you believe that we have not complied with this policy or acted otherwise than in accordance with data protection law, then you should notify us.