1. Data Protection at a Glance

General Information
The following provides a brief overview of what happens to your personal data when you visit this website. Personal data refers to any information that can identify you personally. For more detailed information on data protection, please refer to our complete data protection declaration below this text.

Data Collection on This Website
Who is responsible for data collection on this website?
The website operator is responsible for data processing on this site. Their contact information can be found in the "Notice on the Responsible Body" section of this data protection declaration.

How do we collect your data?
Data is collected either when you provide it to us, for instance, by entering it into a contact form, or automatically through our IT systems when you visit the website. This automatically collected data is primarily technical, such as your browser, operating system, or time of visit, and is gathered as soon as you access this website.

What do we use your data for?
Some of the data is used to ensure the website functions correctly, while other data may be used to analyze your browsing behavior.

What rights do you have regarding your data?
You have the right to request information at any time, free of charge, about the origin, recipient, and purpose of your stored personal data. You can also request correction or deletion of your data, revoke any consent given for data processing, or request restriction of data processing under certain circumstances. Additionally, you have the right to file a complaint with the responsible supervisory authority. Feel free to contact us if you have further questions regarding data protection.

Analytics and Third-Party Tools
Your browsing behavior may be statistically analyzed when you visit this website, mainly using analytics programs. Detailed information about these programs can be found below.

2. Hosting

Hosting Provider
We host the content of our website with DomainFactory. DomainFactory GmbH, c/o WeWork, Neuturmstrasse 5, 80331 Munich (hereinafter "DomainFactory") collects various log files, including your IP address, when you visit our website. For details, please see DomainFactory’s privacy policy at DomainFactory Privacy Policy.

The use of DomainFactory is based on Article 6(1)(f) GDPR, as we have a legitimate interest in the reliable presentation of our website. Processing is conducted based on Article 6(1)(a) GDPR and Section 25(1) TTDSG if relevant consent is required, such as for cookies or device fingerprinting, which can be revoked at any time.

Order Processing
We have a data processing agreement (DPA) with DomainFactory to ensure that our visitors' personal data is processed only according to our instructions and in compliance with GDPR requirements.

3. General Information and Mandatory Disclosures

Data Protection
The operators of this site take the protection of your personal data seriously. Your data is treated confidentially and in accordance with statutory data protection regulations as outlined in this data protection declaration. This declaration explains what data we collect, how we use it, and the purposes of such use.

Please be aware that data transmission over the Internet (e.g., via email) may have security gaps, and complete protection of data against third-party access is not possible.

Notice on the Responsible Body
The responsible body for data processing on this website is:
K Group GmbH
Unterer Anger 14
80331 Munich
Germany
Telephone: +49 155 66311487
Email: info@kooray-food.com

The responsible body is the individual or legal entity that decides the purpose and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration
Unless a specific retention period is specified in this data protection declaration, your personal data will be stored with us until the purpose for data processing ceases to apply. If you submit a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your data (e.g., retention periods under tax or commercial law); in such cases, deletion will occur after these reasons no longer apply.

Legal Basis for Data Processing
If you have consented to data processing, we process your personal data based on Article 6(1)(a) GDPR or, in cases of special data categories, Article 9(2)(a) GDPR. In cases of explicit consent for third-country data transfer, Article 49(1)(a) GDPR applies. For data necessary to fulfill a contract or pre-contractual measures, Article 6(1)(b) GDPR is applicable. If data processing is required to fulfill a legal obligation, we rely on Article 6(1)(c) GDPR. Further processing may be based on our legitimate interest per Article 6(1)(f) GDPR.

Data Transfer to Third Countries
We may use tools provided by companies based in third countries that may not offer data protection at EU levels, including some US-based companies that lack EU-US Data Privacy Framework (DPF) certification. Data transfer to the USA, or other third countries, is permissible only if the recipient has DPF certification or comparable safeguards.

Recipients of Personal Data
In the course of our business, we may need to share personal data with external parties. We only share personal data with third parties if it is necessary for contract fulfillment, legally required, or based on our legitimate interest under Article 6(1)(f) GDPR, or if other legal grounds for sharing data apply.

Revocation of Consent to Data Processing
Some data processing operations are only possible with your explicit consent. You may revoke consent at any time, which will not affect the legality of data processing carried out before the revocation.

Right to Object to Data Processing in Special Cases and Direct Marketing (Article 21 GDPR)
If your data is processed based on Article 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you object, we will cease processing your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims. If your data is processed for direct marketing, you have the right to object to this processing at any time, including profiling related to direct marketing. If you object, your data will no longer be used for direct marketing purposes.

Right to Lodge a Complaint
If you believe there has been a breach of GDPR, you have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, place of work, or location of the alleged violation.

Right to Data Portability
You have the right to receive your data, processed automatically based on your consent or a contract, in a commonly used, machine-readable format or to have it transferred to another responsible party where technically feasible.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection when the browser address bar changes from “http://” to “https://” and a lock symbol appears in the browser’s address line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

After concluding a paid contract, you may be required to provide payment details (e.g., account number for direct debit authorization) for processing payments. Payments are made exclusively through an encrypted SSL or TLS connection using common payment methods (Visa/MasterCard, direct debit). An encrypted connection can be identified when the browser address bar changes from “http://” to “https://” and the lock symbol appears in the browser’s address line. Encrypted communication ensures your payment details cannot be read by third parties.

Objection to Advertising Emails

Use of contact details published under the legal notice obligation to send unsolicited advertising and information materials is hereby expressly prohibited. The site operators reserve the right to take legal action in the event of unsolicited advertising information, such as spam emails.

Data Collection on This Website

Cookies

Our website uses “cookies.” Cookies are small data packets that do not harm your device. They are stored either temporarily for a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain on your device until you delete them or until your web browser automatically deletes them. Cookies can be first-party (from us) or third-party (from third-party companies). Third-party cookies enable the integration of certain services within websites (e.g., payment processing cookies).

Cookies serve various functions. Some are technically necessary, as certain website functions may not work without them (e.g., shopping cart functionality or video display). Others are used to analyze user behavior or for advertising purposes. Cookies required for electronic communication or essential website functions (necessary cookies) are stored based on Article 6 Paragraph 1 Letter f GDPR, unless another legal basis is specified. If you have consented to the use of cookies and similar recognition technologies, processing occurs solely based on this consent (Art. 6 Para. 1 Letter a GDPR and Section 25 Para. 1 TTDSG), which can be revoked at any time.

You can set your browser to notify you when cookies are set, allow cookies only in specific cases, exclude cookies in certain cases, or activate automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website. For information about cookies and services used on this site, please see our data protection declaration.

Contact Form

If you send us inquiries through the contact form, the information provided, including your contact details, will be stored for processing the inquiry and any follow-up questions. This data will not be shared without your consent. This processing occurs based on Article 6 Paragraph 1 Letter b GDPR if your request is related to contract fulfillment or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively managing inquiries (Art. 6 Para. 1 lit. f GDPR) or your consent (Art. 6 Para. 1 lit. a GDPR), which you can revoke at any time. Your data from the contact form will remain with us until you request deletion, withdraw consent, or the purpose of data storage no longer applies. Mandatory legal provisions, such as retention periods, remain unaffected.

Inquiries by Email, Telephone, or Fax

If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, request), will be stored and processed for handling your request. This data will not be shared without your consent. Processing occurs based on Article 6 Paragraph 1 Letter b GDPR if your inquiry relates to contract fulfillment or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively managing inquiries (Art. 6 Para. 1 lit. f GDPR) or your consent (Art. 6 Para. 1 lit. a GDPR), which can be revoked at any time. Data from inquiries will remain with us until deletion is requested, consent is withdrawn, or the storage purpose no longer applies. Statutory retention periods remain unaffected.

Registration on This Website

You can register on this site to use additional features. The data entered will be used solely for the purpose of using the respective offer or service for which you registered. The mandatory information requested during registration must be provided in full; otherwise, we may reject the registration. For important updates, such as changes to the offer or necessary technical adjustments, we will inform you via the email address provided during registration. The data collected will be stored as long as you remain registered on this website and will be deleted afterward. Statutory retention periods remain unaffected.

Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager, a tool by Google Ireland Limited that helps us integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create user profiles, store cookies, or conduct independent analyses; it solely manages tools integrated via it. However, Google Tag Manager collects your IP address, which may be transmitted to Google’s parent company in the United States. The use of Google Tag Manager is based on Article 6 Paragraph 1 Letter f GDPR, reflecting the site operator's legitimate interest in easy and quick management of various website tools. If appropriate consent is obtained, processing is exclusively based on Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG for consent-required cookies or information access on user devices. Consent can be revoked at any time.

Google Analytics

This website uses Google Analytics, a web analysis service by Google Ireland Limited. Google Analytics enables website operators to analyze visitor behavior, including page views, session duration, and the user’s operating system and origin. This data is collected under a user ID and linked to the visitor's device. Google Analytics also records mouse, scroll movements, and clicks and may use modeling approaches and machine learning for data analysis. Data collected is typically sent to Google servers in the USA.

This service is used based on your consent, per Art. 6 Para. 1 Letter a GDPR and § 25 Para. 1 TTDSG. Consent can be revoked at any time. Data transfer to the USA follows the EU Commission's standard contractual clauses. You can find more details here: Link.

Google Analytics eCommerce Measurement

This website uses the “E-Commerce Measurement” feature of Google Analytics, allowing the website operator to analyze purchasing behavior of website visitors for improving online marketing performance. This includes data on orders, average order values, shipping costs, and the time from viewing to purchasing a product. Google may compile this data under a transaction ID, linked to the respective user or their device.

Google Ads

The website operator uses Google Ads, an online advertising service from Google Ireland Limited, located in Dublin, Ireland. Google Ads enables the display of advertisements on Google’s search engine or on third-party websites based on search terms entered by users (keyword targeting) and user data available on Google, such as location and interests (target group targeting). This allows the website operator to analyze the effectiveness of ad campaigns, such as which search terms led to ad clicks and how many resulted in conversions. This service is based on user consent, as per Art. 6(1)(a) GDPR and § 25(1) TTDSG, and consent can be revoked at any time. Data transfers to the USA follow the EU Commission’s standard contractual clauses. For more information, please refer to Google’s Privacy Policy and Terms of Service.

Google AdSense

This website uses Google AdSense, a service for integrating advertisements, provided by Google Ireland Limited. Google AdSense allows targeted ads from third-party companies to be displayed based on users' interests, which are inferred from previous browsing behavior. Google AdSense uses cookies, web beacons, and similar tracking technologies to collect information about visitor traffic. Data collected, including your IP address, may be transferred to Google servers in the USA, where it may be shared with Google’s contractual partners. However, IP addresses are not merged with other Google data. The use of this service is based on consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG, which may be revoked at any time.

Google Ads Remarketing

This website utilizes Google Ads Remarketing, a feature provided by Google Ireland Limited, which enables assigning users who interact with the online offering to specific target groups for displaying interest-based ads on Google’s ad network. With cross-device functionalities, personalized ad messages can be adapted based on previous browsing behavior across devices. If you have a Google account, you may opt-out of personalized advertising at any time.

Google Conversion Tracking

This website uses Google Conversion Tracking by Google Ireland Limited to recognize if users complete specific actions, such as clicking buttons or viewing products. This helps create conversion statistics that reveal the total number of ad-clicking users and the actions they completed. No personally identifiable information is provided to the website operator. Data is collected through cookies or similar technologies and is based on user consent, as per Art. 6(1)(a) GDPR and § 25(1) TTDSG.

Pinterest Tag

This website integrates Pinterest Tag by Pinterest Europe Ltd., which records user actions on the website. This data can be used for displaying interest-based advertising on Pinterest’s network. The Pinterest Tag collects information such as tag ID, location, referrer URL, and promotion-specific data like order value. The technology enables cross-site analysis of user behavior.

Newsletters

Newsletter Data

To receive the website’s newsletter, you must provide an email address and confirm ownership. This data is stored and processed by the newsletter service provider, Mailchimp, based in the USA. Mailchimp helps organize and analyze newsletter campaigns by tracking email open rates and clicks through web beacons. This analysis serves to better tailor future newsletters to recipients' interests. Unsubscribing removes you from the mailing list, and data transfers to the USA adhere to the EU Commission’s standard contractual clauses.

Plugins and Tools

YouTube

Embedded videos on this website are hosted on YouTube, provided by Google Ireland Limited. When accessing a page with a YouTube video, information about the pages visited and user behavior is sent to YouTube. Logged-in YouTube users enable YouTube to link browsing behavior to their profiles, which can be prevented by logging out.

Google Fonts (Local Hosting)

This website uses Google Fonts, provided by Google for consistent font display. The fonts are installed locally, and no connection is made to Google servers.

Adobe Fonts

This website uses Adobe Fonts for uniform font display, hosted by Adobe Systems Incorporated. When accessing the website, your browser connects to Adobe’s servers in the USA, transmitting your IP address. Adobe states that cookies are not used for providing the fonts.

Google reCAPTCHA

This website employs Google reCAPTCHA, a service by Google Ireland Limited, to verify that data entered on the website (e.g., through a contact form) is by a human and not an automated program. reCAPTCHA analyzes user behavior to detect automated submissions.

Online Marketing and Affiliate Programs

Affiliate Programs on This Website

This website participates in affiliate partner programs, allowing the display of affiliate advertisements. When users click on an affiliate ad and complete a transaction, the publisher earns compensation. Cookies or similar tracking technologies are used to identify the ads accessed and transactions completed.

Amazon Affiliate Program

The website participates in Amazon’s affiliate program. For more details, please refer to Amazon’s Privacy Policy.

Processing Customer and Contract Data
We collect, process, and use personal customer and contract data to establish, design, and modify our contractual relationships. We only collect, process, and use data regarding your use of this website (usage data) to the extent necessary to enable the use of our services or for billing purposes. The legal basis for this is Article 6, Paragraph 1, Letter b of the GDPR. Customer data collected will be deleted once the order is fulfilled or the contract ends, and after the expiration of any statutory retention periods. Statutory retention periods remain unaffected.

Data Transmission for Contracts with Online Shops, Retailers, and Goods Shipping
If you order goods from us, we will share your personal data with the companies responsible for delivery and payment processing. Only the data necessary for each service provider to fulfill their specific task will be released. The legal basis for this is Article 6, Paragraph 1, Letter b of the GDPR, which allows data processing for fulfilling a contract or pre-contractual measures. With your consent under Article 6, Paragraph 1, Letter a of the GDPR, we may also share your email address with the delivery company so they can provide shipping status updates. You may revoke this consent at any time.

Data Transfer for Contracts Involving Services and Digital Content
We only transfer personal data to third parties as required for contract fulfillment, such as to the credit institution processing the payment. Data will not be transmitted further without your express consent. We do not share your data with third parties for advertising purposes without your explicit consent. The basis for data processing is Article 6, Paragraph 1, Letter b of the GDPR, allowing data processing for contract fulfillment or pre-contractual measures.

Payment Services
We integrate payment services from third-party providers on our website. When making a purchase, your payment details (e.g., name, payment amount, account details, credit card number) are processed by the payment provider for transaction purposes. The contractual and data protection terms of each provider apply to these transactions. The use of payment providers is based on Article 6, Paragraph 1, Letter b of the GDPR (contract processing), and also reflects our interest in a smooth, secure payment process (Article 6, Paragraph 1, Letter f of the GDPR). Where specific consent is required, Article 6, Paragraph 1, Letter a of the GDPR serves as the legal basis; this consent may be revoked at any time.

We use the following payment services/providers on this website:

• PayPal
  Provided by PayPal (Europe) S.à.r.l. et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg. Data transfer to the USA follows the EU Commission’s standard contractual clauses. See PayPal's privacy policy: PayPal Privacy Policy.

• Apple Pay
  Provided by Apple Inc., Cupertino, CA 95014, USA. Privacy policy: Apple Privacy Policy.

• Google Pay
  Provided by Google Ireland Limited, Dublin, Ireland. Privacy policy: Google Privacy Policy.

• Stripe
  Provided by Stripe Payments Europe, Ltd., Dublin, Ireland. Data transfer to the USA is based on EU standard contractual clauses. See Stripe's privacy policy: Stripe Privacy Policy.

• Klarna
  Provided by Klarna AB, Stockholm, Sweden. Klarna collects personal data and uses cookies to optimize the checkout experience. Privacy policy: Klarna Privacy Policy.

• Paydirekt
  Provided by Paydirekt GmbH, Frankfurt am Main, Germany. Privacy policy: Paydirekt Privacy Policy.

• Instant Bank Transfer
  Provided by Sofort GmbH, Munich, Germany. Privacy policy: Sofort Privacy Policy.

• Amazon Pay
  Provided by Amazon Payments Europe SCA, Luxembourg. Privacy policy: Amazon Pay Privacy Policy.

• Mollie
  Provided by Mollie BV, Amsterdam, Netherlands. Privacy policy: Mollie Privacy Policy.

• PayOne
  Provided by PAYONE GmbH, Frankfurt am Main, Germany. Privacy policy: PayOne Privacy Policy.

• giropay
  Provided by paydirekt GmbH, Frankfurt am Main, Germany. Privacy policy: giropay Privacy Policy.

• Unzer
  Provided by Unzer GmbH, Heidelberg, Germany. Privacy policy: Unzer Privacy Policy.

• CopeCart
  Provided by CopeCart GmbH, Berlin, Germany. Privacy policy: CopeCart Privacy Policy.

• Shopify Payments
  Provided by Shopify International Limited, Dublin, Ireland. Privacy policy: Shopify Privacy Policy.

• American Express
  Provided by American Express Europe SA, Frankfurt am Main, Germany. Data transfer to the USA follows Binding Corporate Rules. Privacy policy: American Express Privacy Policy.

• Mastercard
  Provided by Mastercard Europe SA, Waterloo, Belgium. Data transfer to the USA follows Mastercard's Binding Corporate Rules. Privacy policy: Mastercard Privacy Policy.

• VISA
  Provided by Visa Europe Services Inc., London, UK. Data transfer to the USA follows the EU Commission's standard contractual clauses. Privacy policy: VISA Privacy Policy.