Africa Tea Collection specialty tea being poured into two cups

Privacy Policy

Kazi Yetu UG (“Kazi Yetu” or “we”) respects your privacy and is committed to protecting personal data of data subjects (“you”). In the following, we inform you about the processing of your personal data when using our website and online shop. Kazi Yetu has appointed a data privacy manager who is responsible for overseeing questions in relation to this privacy notice according to the General Data Protection Regulation (GDPR; in German Datenschutzgrundverordnung/DSGVO). If you have any questions, please contact us, using the details below.

Contact Details:
Kazi Yetu UG
Ms Tahira Abdulaziz Nizari
Stegelkoppel 12
23560 Lübeck
Germany
Phone: +49 179 20 40 420
E-Mail: hello@kazi-yetu.com

1. Why do we need this notice?

This privacy notice will let you know how we look after your personal data when you visit the website of and/or you otherwise engage with Kazi Yetu, it also provides an explanation of your privacy rights and how the law protects you.

2. What kind of data is personal data?

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We collect and process personal data through visitors use of this website, and individuals wider engagement with us, including when you get in touch with us using a web form, sign up to receive a newsletter or when you contact us about our products (over the phone or in person) so we can provide services to you, and in performing those services.

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

(i) Identity & Contact Data: includes first name, last name, username or similar identifier, title, address, email address and phone numbers.

(ii) Order Data: includes information about all your previous orders.

(iii) Financial & Transaction Data: includes bank account and payment details to and from you.

(iv) Marketing and Communications Data: includes your preferences in receiving marketing from us, your communication preferences and use of this website.

(v) Technical Data/Server-Logfiles: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.

3. Children’s Privacy

Our Service does not address anyone under the age of 13 (“Children”).

We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your Children has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a children under age 13 without verification of parental consent, we take steps to remove that information from our servers.

4. Purposes for which we will use your personal data

4.1 Data collection when visiting our website

When you visit the website of Kazi Yetu even if you do not register for an account or newsletter or place an order or otherwise transmit information to us, we collect the data that your browser transmits to our server (“Server-Logfiles”); hat also applies if you visit the website for information purposes only; such as i.e.

  • IP address
  • Date and time of the request
  • Time zone different from Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/http status code
  • The amount of data transferred
  • Website from which the request comes
  • Browser, operating system and its interface
  • Language and version of the browser software date and time of access, IP-address used, operating system used, browser used.

The data processing is performed in accordance with Art. 6 (1) f. DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. If necessary, the server log files will be checked later if there is a suspicion of illegal use.

4.2 Data collections when you contact us

You can contact us via the website. Personal data is collected in the course of contacting us. These data are identity and contact data, which can be seen in the contact form, too. This data is processed exclusively for the purpose of dealing with your enquiry.

The data processing is performed in accordance with Art. 6 (1) f. DSGVO. If you contact us as part of a contract initiation process the data processing is performed in accordance with Art. 6 (1) b. DSGVO. If there is no legal obligation to store your data, it will be deleted after the request has been completed.

4.3 Data collection when subscribing to the e-mail newsletter

You can subscribe to our newsletter. We use the so-called double-opt-in procedure to register for our newsletter. This means that after your registration, we will send you an email to the email address you provided, in which we ask you to confirm that you wish to receive the newsletter. We will regularly send you offers and information. For this we need to collect personal data. These data are identity and contact details, which you can also see in the newsletter subscription form. By registering for the newsletter, you give us permission to use your data. You can unsubscribe from the newsletter at any time and revoke your consent.

The data processing is performed in accordance with Art. 6 (1) a. DSGVO. When you register for the newsletter, we also store server log files in order to be able to track any misuse of your data. After unsubscribing from the newsletter, your data will be deleted unless your data is processed in the context of another use that is legally permissible and mentioned in this privacy policy.

4.4 Marketing e-mails

If you have not expressly indicated that you do not want us to use your email address that you have provided to us for an order, we may send marketing emails. You can of course object to the use at any time. Contact us about this.

The data processing is performed in accordance with Art. 6 (1) f. DSGVO because of our legitimate interest in direct marketing.

4.5 Data collection during contract processing and if opening a customer account

Personal data must be collected in order to execute a contract. The personal data is the identity and contact details, which you can find on the order form. Financial and transaction data is also collected. You have the option of setting up a customer account and saving your data. You can delete your customer account at any time. We process your data within the framework of contract processing. After complete processing of the contract or if you delete the customer account, we will delete your data, unless other legal requirements and deadlines force us to retain and process the data or you have consented to another use, which is possible on the basis of this declaration.

The data processing is performed in accordance with Art. 6 (1) b. DSGVO because data processing is necessary for the performance of a contract or for the performance of pre-contractual obligations.

5. Data processing and transfer within the scope of performing our contract obligations

We use service providers to fulfil our contractual obligations. We have to transmit data to these service providers. For example, identity and contact data are passed on to transport service providers and financial data to payment service providers, insofar as this is necessary in each case.

The data processing is performed in accordance with Art. 6 (1) b. DSGVO because data processing is necessary for the performance of a contract.

6. Cookies

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.

The legal bases for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

Cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programs or transmit viruses to your computer. They are used to make the website as a whole more user-friendly and effective.

We use session cookies for the operation of our website. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognised when you return to the website. The session cookies are deleted when you close the browser. Cookies are also used in connection with the use of Google Analytics and etracker.

You can also prevent the storage of cookies by setting your browser software accordingly. If you prevent the storage of cookies, please note that you may not be able to use this website to its full extent.

7. Use of Google Analytics

Google Analytics is a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, and compiling reports on website activity.

You may refuse the use of cookies by selecting the appropriate settings on your browser. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

We use Google Analytics with the extension “_anonymizeIp()”. This means that IP addresses are processed in a shortened form, which means that they cannot be linked to a specific person.

We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user.

The data processing is performed in accordance with Art. 6 (1) f DSGVO.

For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, www.privacyshield.gov/EU-US-Framework.

Information of the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

8. Use of Instagram

Within our online offer, functions and contents of the service Instagram, offered by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, may be integrated. This may include, for example, content such as images, videos or texts and buttons with which users can share content of this online offer within Instagram. If the users are members of the Instagram platform, Instagram can assign the call-up of the above-mentioned content and functions to the users’ profiles there. Instagram privacy policy: http://instagram.com/about/legal/privacy/.

9. Social Media

In addition to our website, we are present in various social media.

Please refer to the privacy policy of the respective platform for the purpose and scope of data collection as well as the provisions on the use of your data by the respective operator.

Facebook, -pages, -groups, (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on the basis of an agreement on joint processing of personal data – Privacy Policy: https://www.facebook.com/about/privacy/, specifically for pages: https://www.facebook.com/legal/terms/information_about_page_insights_data, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

10. Your rights

The DSGVO grants you a variety of different rights. In the following we would like to inform you about them:

10. 1 Request access to your personal data – Art. 15 DSGVO – (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

10. 3 Request erasure of your personal data – Art. 17 DSGVO -. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

10. 3 Request erasure of your personal data – Art. 17 DSGVO -. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.

10.4 Request restriction of processing of your personal data – Art. 18 DSGVO -. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.

10.5 Right of information – Art. 19 DSGVO – You have the right being informed by us if we have communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Art, 16, Art. 17. (1) and Art. 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

10.6 Request the transfer of your personal data to you or to a third party – Art. 20 DSGVO – We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.

10.7 Withdraw consent at any time where we are relying on consent to process your personal data – Art. 7 (3) DSGVO – However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.

10.8 Right to complain – Art. 77 DSGVO – If you consider that the processing of any personal data is in breach of the GDPR, you have the right to submit a complaint to a supervisory authority: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Frau Marit Hansen, Postfach 71 16, 24171 Kiel, Holstenstraße 98, 24103 Kiel, Telefon: 0431/988-1200, E-Mail: mail@datenschutzzentrum.de, Homepage: https://www.datenschutzzentrum.de.

11. Right to object

Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes as described above.

In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

12. How long will we use the personal data for?

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data and the purposes for which we process your personal data.

Art. 6 (1) a. DSGVO: Until you exercise your right to object in accordance with Art. 21 (2) DSGVO.

Art. 6 (1) b. DSGVO: If there are legal storage periods, the data is regularly deleted after this period has expired, unless it is still required for the fulfilment of the contract or there is a justified interest in the continued storage.

Art. 6 (1) f. DSGVO. Until you exercise your right to object in accordance with Art. 21 (2) DSGVO, unless and if there is no case of direct marketing, we can demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.

Furthermore, stored personal data shall be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

13. Data security

We secure our website and other systems by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. You should always keep your access information confidential and close the browser window when you have finished communicating with us, especially if you share the computer with others.

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.