We take data protection and confidentiality very seriously and comply with the applicable national and European data protection provisions. We outline below the most important information concerning how we collect, process and use data, including in particular, what information and personal data we store, and what we do with it.
Some of the offers or services which we make available via https://www.tetra.net/en-gb/ may be covered by different provisions. These additional provisions, such as: money-back-promotion, product testing, free product promotions, will be referred to within the framework of our offer or service, and they shall have precedence over the following provisions.
The responsible person for the collection, processing and use of your personal data via this website, in accordance with the General Data Protection Regulation (“GDPR”), is Tetra GmbH, Herrenteich 78, 49324 Melle, Germany (“Controller”, Art. 4 (7) GDPR).
2. Collection, Processing and Use of Personal Data
2.1. Personal Data
Personal data is defined as any information relating to an identified or identifiable natural person (Art. 4 (1) GDPR).
This shall include, in particular, your name, email address, telephone number, address, date of birth, as well as various inventory data that you provide in the framework of an online order, a registration, the creation of a customer account or a query submitted via the contact form (hereinafter referred to as „Personal Data“).
2.2. Collection, Processing and Use of Your Data
In general, it is possible to use our websites without entering any Personal Data. Insofar as our webpages collect any Personal Data, this shall occur on a voluntary basis wherever possible.
In detail, we collect and process the following categories of Personal Data for the following purposes:
2.2.1. For our business relationship
We will collect and process your name, address, purchasing history and similar required Personal Data to handle the business relationship between us, for example to answer your query, to process the agreement made with you, to deliver any ordered goods, to process payments or for technical administration purposes. The legal basis for the processing is Article 6 (1) lit. b GDPR as it is necessary for the performance of contracts with you.
We will retain this Personal Data for the period of time that our business relationship lasts. If there have not been transactions between us for three years, we delete or anonymise your Personal Data, unless we are required by law to store it for a longer period.
2.2.2. Create a profile for our database
When you contact us for the first time, we create a profile for you in our database. All further Personal Data, which you subsequently submit to us, e.g. via purchases or customer service contact, will also be saved on your profile. The legal basis for this processing is Article 6(1) lit. b GDPR as it is necessary for the performance of contracts with you.
We will retain this Personal Data for the period of time that our business relationship lasts. If there have not been transactions or customer service contacts by you for three years, we delete or anonymize your Personal Data, unless we are required by law to store it for a longer period.
2.2.3. Newsletter subscription & analysis of newsletter use
If you subscribe to our email mailing list, we shall use the Personal Data submitted by you with your consent for sending email newsletters to you on a weekly basis. You must submit your email address in order to register. Any further information shall be submitted on an entirely voluntary basis and used in order to tailor the newsletter content to your interests (interests) or to better address you in the newsletter (name, gender). The newsletters will contain current offers, news and information about our products as well as general advice and information regarding matters revolving around our products. The legal basis for this processing is your consent pursuant to Article 6(1) lit. a GDPR.
We will retain your Personal Data for this purpose either (i) until you unsubscribe or (ii) for a maximum of 18 months not opened any newsletter. We will then delete or anonymize your Personal Data, unless we are required by law to store it for a longer period.
You may withdraw consent by unsubscribing from our email newsletters at any time, without reason and with immediate effect. You can unsubscribe via the unsubscribe link at the bottom of our email newsletters, by using our contact form, or by sending an email to firstname.lastname@example.org.
b) Analysis of newsletter use
We continuously seek to improve our service. With this in mind, we carry out an evaluation of the sent email newsletters, e.g. whether the submitted email addresses are available, whether the newsletter has been opened, which links in the newsletters have been used and whether there is any response or return ((automatic) reply, error message etc.). The legal basis for this processing is your consent pursuant to Article 6 (1) lit. a GDPR.
We will retain your Personal Data for this purpose for two years. We will then delete or anonymize your Personal Data, unless we are required by law to store it for a longer period.
2.2.4. Job applications/ Job candidates’ Personal Data
If you apply for a job in our company we need to collect your personal data including name, email / postal address etc. as well as information regarding your professional qualifications. This data will be processed in order to fulfil the application process, the legal justification is Article 6 1. (b) GDPR. As part of the application process you provide this data voluntarily.
Assuming your application is unsuccessful, we will hold your data on file for a period of six months after the application process has been completed and then it will be deleted. This does not apply if legal regulations prohibit the deletion or if the data needs to be stored for purpose of evidence, e.g. in case of claims against our company. In this case the processing of your data is based on legitimate interest pursuant to Article 6 1 (f) GDPR.
Furthermore, with your consent, whilst your application is held on file, your information may be considered for any other suitable vacancies that may come available during the six month period. The respective legal justification for the processing of your data is Article 6 1. (a) GDPR.
In our application process we do not perform any automated individual decision-making according to Article 22 GDPR.
2.3. Consent of minors
Persons aged under 16 may not submit any Personal Data to us without the prior consent of their parents or legal guardian.
2.4. Where you consent: Right to withdraw consent
Where your consent is the legal basis for the processing of your Personal Data, you can withdraw your consent at any time without reasons. Please note that withdrawing your consent will not affect the lawfulness of the processing before the withdrawal.
3. How we share your Personal Data with third parties
Your Personal Data shall only be transferred to third parties in the following cases:
- To our affiliated companies within the Spectrum Brands group, to our service provider for customer support located in Germany or to local distribution partners, depending on your indicated location, in connection with your use of the Tetra website, your request to us or our business relationship with you;
- To our IT agencies which provide IT services to us and which process such data only for the purpose of such services (e.g. newsletter system); and
- To courts, arbitration bodies, law enforcement authorities, regulators or attorneys if necessary to comply with the law or for the establishment, exercise or defense of rights or legal claims.
Insofar as we contract other companies to carry out tasks on our behalf within the framework of a data processing agreement and forward your Personal Data for this purpose, said company or companies shall be required to protect your Personal Data and to use the latter only for the specific purpose outlined in the agreements with these processors.
In cases we transfer, depending on your indicated location, data to countries outside the EU/EEA, we transfer personal data to external recipients in such countries only if the recipient has sufficient safeguards required by law such as EU Standard Contractual Clauses or is certified under the Privacy Shield.
You may request further information, such as copies of the respective safeguards, about the safeguards implemented in relation to specific transfers by contacting email@example.com.
4. Your rights concerning your Personal Data
If certain requirements are fulfilled, you have the following rights:
•Request access to the Personal Data that we process about you,
•Request rectification of your Personal Data,
•Request erasure of your Personal Data,
•Request restriction of Processing of your Personal Data,
•Object to the Processing of your Personal Data,
•Request to receive your Personal Data in a structured, commonly used and machine-readable format (right to data portability), or
•Withdraw any future consent with future effect.
•Not to be subject to a decision based solely on automated processing, including profiling.
You may contact us to claim your rights as follows:
Phone +49 (0) 54 22 / 1 05 0
Fax +49 (0) 54 22 / 4 29 85
We shall respond to your request in accordance with the applicable legal provisions.
6. Data Security
We do our utmost to store your Data using all the technical and organisational possibilities at our disposal to prevent third parties gaining access to it.
All Data is stored on servers with the highest security standards to protect against any attempts by third parties to access the Data.
7. Our Data Protection Officer
8. Your right to lodge a complaint
If you think that the processing of Personal Data by us violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority.
© Tetra GmbH, May 2019
To promote our products and services and to communicate with customers and interested parties, we use the technical platforms and services of Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland and of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. The following policy provides details on how your personal data is processed as well as the legal basis.
Please note that when you use our Facebook page and its functions, you do so on your own responsibility. Facebook processes personal data on your account, your IP address and the devices you use; cookies are used for collecting data. Cookies are small files that are stored on your devices. Facebook sets out in general terms which information it receives and how it uses this data in its Data Policy. Here, you can also find information about how to contact Facebook as well as the opt-out options and the advertising settings. The Data Policy is available here: http://de-de.facebook.com/about/privacy
You can find Facebook’s Full Data Use Policy here: https://de-de.facebook.com/full_data_use_policy
Facebook may use the information collected to provide us, in our capacity as operator of the Facebook page, with statistical information on the use of the Facebook page, such as the gender and age distribution. Furthermore, Facebook may also display more detailed information or adverts to you according to your preferences. Facebook provides further details about this at the following link: http://de-de.facebook.com/help/pages/insights.
The data collected about you in this context is processed by Facebook Ltd. and may be transferred to countries outside the European Union.
When you visit our social media sites (e.g. Facebook), you initiate the processing of your personal data. In this case, we are responsible, together with the operator of the relevant social network, for data processing operations within the meaning of Article 26 of the General Data Protection Regulation (GDPR), provided that we actually make a joint decision with the operator of the social network about the data processing and we also have an influence on data processing.
In principle, you may assert your rights (right of access pursuant to Article 15 GDPR, right to rectification pursuant to Article 16 GDPR, right to erasure pursuant to Article 17 GDPR, right to restriction of processing pursuant to Article 18 GDPR, right to data portability pursuant to Article 20 GDPR and right to complaint pursuant to Article 77 GDPR) vis-à-vis us or the operator of the relevant social network (e.g. Facebook).
We wish to point out that despite the joint responsibility with social network operators pursuant to Article 26 GDPR, we do not have complete control over the data processing of the individual social networks. The corporate policy of the respective provider has a significant influence on our options. If data subjects wish to assert their rights, we can only forward such requests to the social network operator.
Please note that when you use our Instagram page and its functions, you do so on your own responsibility.
When you visit our Instagram page, Instagram collects your IP address and other information that is available on your PC in the form of cookies. This information is used to provide us, in our capacity as operator of the Instagram page, with statistical information on the use of the Instagram page.
The data collected about you in this context is processed by Instagram Inc. and may be transferred to countries outside the European Union. Instagram sets out in general terms which information it receives and how it uses this data in its Data Policy. Here, you can also find information about how to contact Instagram and about the advertising settings. Instagram’s Data Policy is available here: https://help.instagram.com/519522125107875
When you access an Instagram page, the IP address assigned to your device is transmitted to Instagram. According to information provided by Instagram, this IP address is anonymised (for ‘German’ IP addresses) and deleted after 90 days. Instagram also stores information about its users’ devices (e.g. in connection with the ‘login notification’ feature); this may enable Instagram to assign IP addresses to individual users.
If you are currently logged in to Instagram as a user, you will find a cookie with your Instagram ID on your device. As a result, Instagram is able to understand that you visited this page and how you used it. This also applies to all other Instagram pages. Via Instagram buttons embedded in web pages, Instagram is able to record your visits to these web pages and assign them to your Instagram profile. Based on this, data content or advertising can be tailored to suit you.
If you want to avoid this, you should log out of Instagram or disable the ‘stay logged in’ feature, delete the cookies on your device, and close and restart your browser. This deletes Instagram information with which you can be directly identified. You can then use our Instagram page without revealing your Instagram ID. When you use the interactive features on the page (like, comment, messages, etc.), an Instagram login screen appears. After logging in, Instagram will identify you as a specific user again.
Information on how to manage or delete information about you can be found in the Instagram Help Centre.
As the provider of the information service, we do not collect or process any data arising from your use of our service.
The legal basis for the processing of personal data resulting from this and subsequently reproduced for each platform is Article 6(1f) GDPR. The legitimate interest of the provider is in the analysis, communication, sale and advertisement of its products and services.
The legal basis may also be the user’s consent to the platform operator pursuant to Article 6(1a) GDPR. In accordance with Article 7(3) GDPR, the user may withdraw this consent at any time by sending a message to the platform operator.
© Tetra GmbH, February 2022