Privacy Policy

We process personal data (hereinafter generally referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

Pursuant to Article 4(1) of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

In the following Privacy Policy, we provide you with information—in particular—regarding the nature, scope, purpose, duration, and legal basis of the processing of personal data, to the extent that we determine the purposes and means of such processing either alone or jointly with others. In addition, we provide information below regarding the third-party components we use for optimization purposes and to enhance the user experience, to the extent that third parties process data in this context under their own responsibility.

Our Privacy Policy is organized as follows:

I. Information About Us as the Data Controller
II. Rights of Users and Data Subjects
III. Information on Data Processing

I. Information About Us as the Data Controller

The entity responsible for this website under data protection law is:

Sample Company/Sample Entrepreneur
Sample Street 1
12345 Sample City
Germany

Phone: Phone number
Fax: Fax number
Email: muster@mustermail.xy

The provider’s data protection officer is:

Maxie, the Model Woman

[The following information must be provided if an external data protection officer has been appointed]

1 Muster Street,
, 12345 Musterstadt,
, Germany

Phone: Phone number
Fax: Fax number
Email: datenschutz@mustermail.xy

II. Rights of Users and Data Subjects

With regard to the data processing described in more detail below, users and data subjects have the right to

  • the right to confirmation as to whether data concerning them is being processed, the right to access the processed data, the right to further information regarding the data processing, and the right to receive copies of the data (see also Art. 15 of the GDPR);
  • the right to have inaccurate or incomplete data corrected or completed (see also Art. 16 of the GDPR);
  • the immediate erasure of data concerning them (see also Art. 17 of the GDPR), or, alternatively, to the extent that further processing is necessary pursuant to Art. 17(3) of the GDPR, the restriction of processing in accordance with Art. 18 of the GDPR;
  • the right to receive the data concerning them and provided by them, and to have such data transmitted to other providers/data controllers (see also Art. 20 of the GDPR);
  • to file a complaint with the supervisory authority if they believe that the provider is processing their personal data in violation of data protection regulations (see also Art. 77 of the GDPR).

In addition, the provider is obligated to inform all recipients to whom the provider has disclosed data of any rectification or erasure of data or restriction of processing carried out pursuant to Articles 16, 17(1), and 18 of the GDPR. However, this obligation does not apply if such notification is impossible or would involve a disproportionate effort. Notwithstanding this, the user has the right to obtain information about these recipients.

Likewise, pursuant to Article 21 of the GDPR, users and data subjects have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6(1)(f) of the GDPR. In particular, an objection to data processing for the purpose of direct marketing is permitted.

III. Information on Data Processing

The data processed when you use our website will be deleted or blocked as soon as the purpose for which it was stored no longer applies, provided that no legal retention requirements prevent the deletion of the data and no other information regarding specific processing procedures is provided below.

Server Data

For technical reasons—in particular to ensure a secure and stable website—data is transmitted by your web browser to us or to our web hosting provider. These so-called server log files record, among other things, the type and version of your web browser, the operating system, the website from which you navigated to our website (referrer URL), the page(s) on our website that you visit, the date and time of each visit, as well as the IP address of the Internet connection from which our website is accessed.

The data collected in this manner is stored temporarily, but not together with any other data you have provided.

This data is stored pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in improving the stability, functionality, and security of our website.

The data will be deleted no later than seven days after collection, unless further retention is necessary for evidentiary purposes. Otherwise, the data will be wholly or partially exempt from deletion until the incident has been fully resolved.

Cookies

a) Session Cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the web browser you are using. These cookies are used to process certain information about you on an individual basis, such as your browser or location data, or your IP address.

This processing makes our website more user-friendly, effective, and secure, as it enables, for example, the display of our website in different languages or the provision of a shopping cart feature.

The legal basis for this processing is Article 6(1)(b) of the GDPR, provided that these cookies process data for the purpose of entering into or performing a contract.

If the processing is not for the purpose of entering into or fulfilling a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in such cases is Article 6(1)(f) of the GDPR.

These session cookies will be deleted when you close your web browser.

b) Third-Party Cookies

In some cases, our website may also use cookies from partner companies with whom we collaborate for the purposes of advertising, analysis, or website functionality.

For details on this matter—in particular regarding the purposes and legal bases for the processing of such third-party cookies—please refer to the information below.

c) Disposal Options

You can prevent or restrict the installation of cookies by adjusting your web browser settings. You can also delete cookies that have already been stored at any time. However, the steps and measures required to do so depend on the specific web browser you are using. If you have any questions, please use the help function or documentation for your web browser, or contact the browser’s manufacturer or support team. However, for so-called Flash cookies, processing cannot be prevented via your browser settings. Instead, you must change the settings in your Flash Player. The steps and measures required for this also depend on the specific Flash Player you are using. If you have any questions, please use the help function or documentation for your Flash Player, or contact the manufacturer or user support.

However, if you block or restrict the use of cookies, this may prevent you from fully utilizing all the features of our website.

Customer Account / Registration Feature

If you create a customer account with us through our website, we will use the information you provide during registration (such as, for example, your name, address, or email address) solely for pre-contractual services, for the fulfillment of the contract, or for customer service purposes (e.g., to provide you with an overview of your previous orders with us or to offer you the “wish list” feature). At the same time, we will store your IP address and the date and time of your registration. Of course, this data will not be disclosed to third parties.

As part of the rest of the registration process, we will obtain your consent to this processing and refer you to this Privacy Policy. The data we collect during this process will be used exclusively to set up your customer account.

To the extent that you consent to this processing, Article 6(1)(a) of the GDPR serves as the legal basis for the processing.

If the opening of the customer account also serves the purpose of taking precontractual measures or fulfilling the contract, the legal basis for this processing is also Article 6(1)(b) of the GDPR.

You may revoke the consent you have given us to open and maintain your customer account at any time, with future effect, in accordance with Article 7(3) of the GDPR. To do so, you simply need to notify us of your revocation.

The data collected for this purpose will be deleted as soon as processing is no longer necessary. However, we must comply with retention periods required by tax and commercial law.

Newsletter

If you sign up for our free newsletter, the information requested from you—namely, your email address and, optionally, your name and address—will be transmitted to us. At the same time, we store the IP address of the Internet connection you use to access our website, as well as the date and time of your registration. As part of the registration process, we will obtain your consent to receive the newsletter, describe its content in detail, and refer you to this privacy policy. We use the data collected in this process exclusively for sending the newsletter—therefore, it will not be shared with third parties.

The legal basis for this is Article 6(1)(a) of the GDPR.

You may revoke your consent to receive the newsletter at any time with future effect, in accordance with Article 7(3) of the GDPR. To do so, simply notify us of your revocation or click the unsubscribe link included in every newsletter.

Contact Requests / How to Contact Us

If you contact us via the contact form or by email, the information you provide will be used to process your inquiry. Providing this information is necessary for us to process and respond to your inquiry—without it, we will be unable to respond to your inquiry, or our response may be limited.

The legal basis for this processing is Article 6(1)(b) of the GDPR.

Your data will be deleted once your inquiry has been fully resolved and provided that no legal retention requirements prevent its deletion—such as in the case of any subsequent contract processing.

Subscribe to Posts

If you publish posts on our website, we also offer you the option to subscribe to any follow-up posts by third parties. In order to notify you of these follow-up posts via email, we process your email address.

The legal basis for this is Article 6(1)(a) of the GDPR. You may revoke your consent to this subscription at any time with future effect in accordance with Article 7(3) of the GDPR. To do so, simply notify us of your revocation or click the unsubscribe link included in the respective email.

Google Analytics

We use Google Analytics on our website. This is a web analytics service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as “Google.”

Through certification under the EU-U.S. Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that EU data protection requirements will be complied with even when data is processed in the United States.

The Google Analytics service is used to analyze user behavior on our website. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the analysis, optimization, and efficient operation of our website.

Usage and user-related information, such as IP address, location, time, or frequency of visits to our website, is transmitted to a Google server in the United States and stored there. However, we use Google Analytics with the so-called anonymization feature. With this feature, Google truncates the IP address while it is still within the EU or the EEA.

The data collected in this way is, in turn, used by Google to provide us with an analysis of visits to our website and user activity on the site. This data may also be used to provide additional services related to the use of our website and the Internet.

Google states that it does not associate your IP address with any other data. In addition, Google states under

https://www.google.com/intl/de/policies/privacy/partners

We have provided additional information regarding data protection for you, including, for example, how to prevent the use of your data.

In addition, Google offers under

https://tools.google.com/dlpage/gaoptout?hl=de

a so-called opt-out add-on, along with additional information about it. This add-on can be installed with all major web browsers and gives you greater control over the data that Google collects when you visit our website. The add-on instructs Google Analytics’ JavaScript (ga.js) not to transmit information about your visit to our website to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analytics services. You can, of course, also find out in this Privacy Policy whether we use any other web analytics services and, if so, which ones.

Google Fonts

We use Google Fonts on our website to display external fonts. This is a service provided by Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to simply as “Google.”

Through certification under the EU-U.S. Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that EU data protection requirements will be adhered to even when data is processed in the United States.

To enable the display of certain fonts on our website, a connection to the Google server in the U.S. is established when you visit our website.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimizing and operating our website in a cost-effective manner.

When you visit our website, the connection established with Google allows Google to determine from which website your request was sent and to which IP address the font should be delivered.

Google offers at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

Further information, particularly regarding the options for preventing data use.

OpenStreetMap

For directions, we use OpenStreetMap, a service provided by the OpenStreetMap Foundation, St. John’s Innovation Center, Cowley Road, Cambridge, CB 4 0 WS, United Kingdom, hereinafter referred to as “OpenStreetMap.”

When you visit one of our web pages that integrates the OpenStreetMap service, OpenStreetMap stores a cookie on your device via your web browser. This allows your user settings and user data to be processed for the purpose of displaying the page and ensuring the functionality of the OpenStreetMap service. Through this processing, OpenStreetMap can identify which website your request was sent from and to which IP address the directions should be transmitted.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in optimizing and ensuring the efficient operation of our website.

If you do not consent to this processing, you have the option to prevent cookies from being installed by adjusting the settings in your web browser. For more details, please see the “Cookies” section above.

OpenStreetMap offers the following at

https://wiki.osmfoundation.org/wiki/Privacy_Policy

Further information regarding the collection and use of data, as well as your rights and options for protecting your privacy.

MailChimp – Newsletter

We offer you the opportunity to sign up for our free newsletters through our website.

We use MailChimp, a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA—hereinafter referred to simply as “The Rocket Science Group”—to send out our newsletter.

Through certification under the EU-U.S. Privacy Shield

https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

The Rocket Science Group guarantees that EU data protection requirements are complied with even when data is processed in the United States. In addition, The Rocket Science Group offers, under

http://mailchimp.com/legal/privacy/

Further information on data protection.

If you subscribe to our newsletter, the data requested during the sign-up process—such as your email address and, optionally, your name and address—will be processed by The Rocket Science Group. In addition, your IP address and the date and time of your registration will be stored. As part of the rest of the sign-up process, we will obtain your consent to receive the newsletter, describe its content in detail, and refer you to this privacy policy.

The newsletter subsequently sent via The Rocket Science Group also contains a so-called “tracking pixel,” also known as a “web beacon.” This tracking pixel allows us to determine whether and when you have read our newsletter and whether you have clicked on any links contained within it. In addition to other technical data—such as information about your computer system and your IP address—the data processed in this manner is stored so that we can optimize our newsletter and tailor it to our readers’ preferences. The data is therefore used to improve the quality and appeal of our newsletter.

The legal basis for sending the newsletter and conducting the analysis is Article 6(1)(a) of the GDPR.

You may revoke your consent to receive the newsletter at any time with future effect, in accordance with Article 7(3) of the GDPR. To do so, simply notify us of your revocation or click the unsubscribe link included in every newsletter.

The Privacy Policy was prepared using the sample privacy policy provided by the law firm Weiß & Partner.