1. INFORMATION ON THE COLLECTION OF PERSONAL DATA
1.1. PERSONAL DATA
The following information explains what kind of personal data will be collected when you visit our website. Personal data is all data that can be related to you personally, such as name, address, email addresses, user behavior.
1.2 DATA CONTROLLER WITHIN THE MEANING OF THE DSGVO
The data controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (DSGVO) is
Asphaltgold GmbH & Co. KG
Heidelberger Straße 129 ½
Phone: 06151 – 629210
Fax: 06151 – 6392121
(also see our Imprint).
You can reach our data protection officer at email@example.com or by sending us a letter with «Data protection officer» added to the address.
1.3 NOTES ON CONTACTING US
When you contact us by email or via a contact form the data you provide (your email address, where applicable: your name and telephone number) will be stored by us to answer your questions. We will delete this data once its storage is no longer necessary, or restrict its processing if statutory retention obligations apply.
1.4 DISCLOSURE OF DATA TO THIRD PARTIES
Your personal data will not be transferred to third parties for purposes other than those listed below.
We will only disclose your personal data to third parties if:
You have given your express consent to this pursuant to Art. 6 (1) S. 1 (a) DSGVO,
The disclosure is permissible pursuant to Art. 6 (1) S. 1 (f) DSGVO to protect our legitimate interests and there is no reason to assume that you have an overridinglegitimate interest in not disclosing your data,
In the event that there is a legal obligation to disclose data pursuant to Art. 6 (1) S. 1 (c) DSGVO, and
This is legally permissible and required for the execution of contractual relationships with you pursuant to Art. 6 (1) S. 1 (b) DSGVO.
1.5 SSL OR TLS ENCRYPTION
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address bar of the browser changes from «http://» to «https://» and by the padlock symbol in your browser’s address bar.
2. GENERAL INFORMATION ON DATA PROCESSING
2.1 SCOPE OF PROCESSING OF PERSONAL DATA
We process the personal data of our users only to the extent necessary to provide a functioning website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in those cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by statutory provisions.
2.2 LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (DSGVO) shall serve as the legal basis.
Art. 6 (1) (b) DSGVO shall serve as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This shall also apply to processing operations necessary for the implementation of pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) DSGVO shall serve as the legal basis.
In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Art. 6 (1) (d) DSGVO shall serve as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail over the first-mentioned interest, Art. 6 (1) (f) DSGVO shall serve as the legal basis for processing.
2.3 DATA ERASURE AND STORAGE DURATION
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if the European or national legislator has provided for this in EU regulations, laws or other provisions to which the data controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.
2.4 DATA TRANSFER ON CONCLUSION OF A CONTRACT FOR SERVICES AND DIGITAL CONTENT
We transfer personal data to third parties only if this is necessary in the context of contract processing, for example to the bank commissioned with payment processing.
Any further transfer of data will not occur, or will only occur if you have expressly consented to the transfer. Your data will not be shared with third parties, for example for advertising purposes, without your express consent.
The basis for data processing is Art. 6 (1) (b) DSGVO, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
3. PROVISION OF THE WEBSITE AND CREATION OF LOG FILES
3.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
Browser type and browser version
User’s operating system
IP address of the user
Date and time of access
Websites from which the user’s system accesses our website
Websites accessed by the user’s system through our website
The data is also stored in the log files of our system. This does not apply to the IP addresses of the user or other data that enable the data to be linked to a user. Such data is not stored together with other personal data of the user.
3.2 LEGAL BASIS FOR DATA PROCESSING
The legal basis for the temporary storage of data is Art. 6 (1) (f) DSGVO.
3.3 PURPOSE OF DATA PROCESSING
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
These purposes also include our legitimate interest in data processing pursuant to Art. 6 (1) (f) DSGVO.
3.4 DURATION OF STORAGE
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. If the data is collected for the purpose of providing the website, this is the case when the current session is terminated.
3.5 POSSIBILITY OF OBJECTION AND REMOVAL
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
4.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
The following data is stored and transmitted in the cookies:
Articles in a shopping cart
4.2 LEGAL BASIS FOR DATA PROCESSING
The legal basis for the processing of personal data using cookies is Art. 6 (1) (f) DSGVO.
4.3 PURPOSE OF DATA PROCESSING
4.4 DURATION OF STORAGE, POSSIBILITY OF OBJECTION AND REMOVAL
This website uses the following types of cookies, the scope and functionality of which are explained below:
4.4.1) Transient cookies are automatically deleted when you close your browser. In particular, these include session cookies, which store a “session ID” that allows various browser requests to be assigned to a common session. They enable your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser.
4.4.2) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
5. EMAIL NEWSLETTER
If you subscribe to our free newsletter, you will be the first to know about new products, valuable tips and latest news as well as exclusive offers. After registration you will receive a confirmation email with an activation link so that you can start receiving the newsletter. If you no longer wish to receive our newsletter, you can unsubscribe at any time by simply clicking on the «unsubscribe» link in the footer of one of our newsletters or by sending an email to firstname.lastname@example.org
Disclosure of data to third parties
If you have subscribed to the asphaltgold newsletter, asphaltgold will use the information you provided on registration to send you the asphaltgold newsletter. Your data will not be passed on to third parties. Our data protection provisions are in accordance with the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).
If you have subscribed to the newsletter, the personal data you provided on registration will be used to send you individual newsletters. No data will be shared with third parties. Our data protection guidelines comply with the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG) of the Federal Republic of Germany.
5.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
You can subscribe to a free newsletter on our website. When registering for the newsletter, the data from the input mask is transmitted to us:
In addition, the following data is collected during registration:
Date and time of registration
Your consent to the processing of your data will be obtained during the registration process and reference will be made to this Privacy Statement.
The newsletter will be sent by Emarsys (see section 5.6 below). Your data will not be shared with third parties.
5.2 LEGAL BASIS FOR DATA PROCESSING
The legal basis for the processing of data after the user has registered for the newsletter is Art. 6 (1) (a) DSGVO provided that the user’s consent has been given.
5.3 PURPOSE OF DATA PROCESSING
The user’s email address is required in order to be able to send the newsletter.
The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
5.4 DURATION OF STORAGE
The data will be deleted as soon as it is no longer required for the purpose of its collection. The user’s email address will therefore be stored as long as the newsletter subscription is active.
Other personal data collected in the course of the registration process is normally deleted after a period of seven days.
5.5 POSSIBILITY OF OBJECTION AND REMOVAL
The subscription to the newsletter can be cancelled by the user at any time. For this purpose, there is a corresponding link in every newsletter.
This also enables the revocation of consent to the storage of personal data collected during the registration process.
5.6 USE OF THIRD-PARTY PROVIDER EMARSYS
Emarsys eMarketing Systems AG (Hans-Fischer-Str. 10, 80339 Munich; www.emarsys.com/de) is also involved in the technical processing of newsletter mailings and is an Austrian company with a branch in Munich. Emarsys provides the software and infrastructure for sending consent-based electronic messages. Emarsys is aware of its obligation towards the recipients of such messages and has a zero-tolerance spam policy. If you have consented as mentioned below, asphaltgold will determine the content and design of its newsletter using the preferences collected on the basis of the pseudonymous user profile, and will merge your email address with the user profile for the purpose of sending a personalized newsletter.
In addition, Emarsys offers various options for analyzing how the newsletters are opened and used, for example, how many users an email was sent to, whether emails were rejected, and whether users unsubscribed from the list after receiving an email. However, these analyses are only group-related and are not used by us for individual evaluation.
After registration, Emarsys will send you an email to confirm your registration («double opt-in»). If you no longer wish to receive our newsletter, you can unsubscribe at any time by clicking on the unsubscribe link contained in every mailing.
For further information on data protection at Emarsys, visit:
Policy on sending product recommendations by email in accordance with Section 7 (3) UWG
According to Sec. 7 (3) of the Act Against Unfair Competition (UWG) of the Federal Republic of Germany we are entitled to use the email address provided when making a purchase in our shop for direct marketing purposes for our own similar products or services. If you no longer wish to receive our product recommendations, you can unsubscribe from them at any time without incurring any costs other than the transmission costs pursuant to the basic tariffs. You can unsubscribe by simply clicking on the «unsubscribe» link in the footer of any one of our product recommendations or by sending an email to email@example.com
6. RIGHTS OF THE DATA SUBJECT
If your personal data is processed, you are a data subject within the meaning of the DSGVO and you have the following rights vis-à-vis the data controller:
6.1 RIGHT TO GAIN ACCESS TO PERSONAL DATA
You can ask the data controller to confirm whether personal data concerning you is processed by us.
If such processing has taken place, you can request the following information from the data controller:
- the purposes for which the personal data is processed;
- the categories of personal data processed;
- the recipients or categories of recipients to whom your personal data has been or is still being disclosed;
- the planned duration of storage of your personal data or, if it is not possible to provide specific information in this respect, the criteria for determining the duration of storage;
- the existence of the right to request from the data controller rectification or erasure of your personal data or the restriction of processing of personal data, or the right to object to such processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- any available information on the source of the data if the personal data is not collected directly from the data subject;
- the existence of an automated decision-making process, including profiling, according to Art. 22 (1) and (4) DSGVO and – at least in these cases – meaningful information about the logic involved, as well as the implications and intended effects of such processing for the data subject.
You have the right to request information as to whether your personal data is transferred to a third country or to an international organization. In this context, you can demand to be informed about the appropriate guarantees under Art. 46 DSGVO in connection with the transfer.
6.2 RIGHT TO RECTIFICATION
You have the right to have your personal data corrected and/or completed by the data controller if the personal data processed relating to you is inaccurate or incomplete. The data controller shall make the correction without delay.
6.3 RIGHT TO RESTRICTION OF PROCESSING
Under the following conditions, you can demand that the processing of your personal data be restricted:
- if you dispute the accuracy of the personal data for a period of time that allows the data controller to verify the accuracy of the personal data;
- if the processing is unlawful and you object to the deletion of the personal data and instead request that the use of the personal data be restricted;
- if the data controller no longer needs the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims, or
- if you have filed an objection to the processing pursuant to Art. 21 (1) DSGVO and it has not yet been determined whether the legitimate reasons of the data controller outweigh your reasons.
Where processing of your personal data has been restricted, such data may, apart from its storage, only be processed with your consent or for the purpose of asserting, exercising or defending legal rights or protecting the rights of another natural or legal person or on grounds of an important public interest of the EU or a Member State.
If processing has been restricted according to the above-mentioned conditions, you will be informed by the data controller before the restriction is lifted.
6.4 RIGHT TO ERASURE
Deletion obligation You may request the data controller to delete your personal data without delay, and the data controller is obliged to delete this data without delay if one of the following reasons applies:
- The personal data pertaining to you is no longer necessary for the purposes for which it was collected or otherwise processed.
- You revoke your consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) DSGVO and there is no other legal basis for the processing.
- You file an objection against the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate reasons for the processing, or you file an objection against the processing pursuant to Art. 21 (2) DSGVO.
- The personal data pertaining to you has been processed unlawfully.
- The deletion of personal data pertaining to you is necessary to fulfil a legal obligation under EU law or the law of the Member States to which the data controller is subject.
- The personal data pertaining to you was collected in connection with services offered by the information company pursuant to Art. 8 (1) DSGVO.
Information to third parties
If the data controller has made your personal data public and is obliged to delete it in accordance with Art. 17 (1) DSGVO, the data controller shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform other data controllers that process the personal data that you, as the data subject, have requested the deletion of all links to this personal data or of copies or replications of this personal data.
Exceptions The right to erasure does not exist if the processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation which requires processing under the law of the EU or of the Member States to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority conferred on the data controller;
- for reasons of public interest in the field of public health pursuant to Article 9 (2) (h) and (i) and Article 9 (3) DSGVO;
- for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) DSGVO, insofar as the right referred to under a) is likely to render impossible or seriously impair the attainment of the objectives of such processing, or
- to assert, exercise or defend legal claims.
6.5 RIGHT TO BE NOTIFIED
If you have asserted a right to the rectification, erasure or restriction of processing of your personal data against the data controller, the latter is obliged to notify all recipients to whom your personal data has been disclosed of such rectification, erasure or restriction of processing, unless this proves impossible or involves a disproportionate effort.
You have a right vis-à-vis the data controller to be informed of these recipients.
6.6 RIGHT TO DATA PORTABILITY
You have the right to receive the personal data pertaining to you that you have provided to the data controller in a structured, common and machine-readable format. In addition, you have the right to pass this data on to another data controller without hindrance by the data controller to whom the personal data was provided, in cases where
- processing is based on consent pursuant to Art. 6 (1) (a) DSGVO or Art. 9 (2) (a) DSGVO or on a contract pursuant to Art. 6 (1) (b) DSGVO, and
- processing is carried out using automated methods.
In exercising this right, you also have the right to request that your personal data be transferred directly from one data controller to another data controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this. The right to data portability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority conferred on the data controller.
6.7 RIGHT OF OBJECTION
You have the right to object at any time to the processing of personal data pertaining to you on the basis of Art. 6 (1) (e) or (f) DSGVO for reasons arising from your particular situation; this also applies to profiling based on these provisions.
The data controller shall no longer process your personal data unless it can prove compelling legitimate grounds for processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If the personal data pertaining to you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data shall no longer be processed for these purposes.
You have the possibility to exercise your right of objection in connection with the use of services offered by the information company – notwithstanding Directive 2002/58/EC – by means of automated procedures using technical specifications.
6.8 RIGHT TO WITHDRAW THE DATA PRIVACY DECLARATION OF CONSENT
You have the right to withdraw your data privacy declaration of consent at any time. The withdrawal of consent shall not affect the legality of the processing carried out on the basis of the consent until its withdrawal.
6.9 AUTOMATED DECISION MAKING IN INDIVIDUAL CASES INCLUDING PROFILING
You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or significantly affects you in a similar way. This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you and the data controller,
- is permitted under the legislation of the EU or the Member States to which the data controller is subject and such legislation contain adequate measures to safeguard your rights and freedoms and your legitimate interests, or
- is made with your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) DSGVO, unless Art. 9 (2) (a) or (g) DSGVO applies and appropriate measures have been taken to protect your rights and freedoms as well as your legitimate interests.
In the cases referred to in (1) and (3), the data controller shall take reasonable steps to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain intervention of a person on the part of the data controller, to present its own point of view and to contest the decision.
6.10. Right to lodge a complaint with a supervisory authority You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The competent supervisory authority for us is: The Hessian State Commissioner, Prof. Dr. Michael Ronellenfitsch, Gustav-Stresemann-Ring 1, telephone: 0611 1408-0, fax: 0611 408-900 or -901, email: firstname.lastname@example.org
7. ANALYTICS TOOLS AND ADVERTISING
7.1 GOOGLE ANALYTICS
This website uses features of Google Analytics, a web analytics service. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called «cookies». These are text files that are stored on your computer and allow an analysis of your use of the website. The information generated by the cookie about your use of this website will generally be transmitted to a Google server in the USA and stored there.
Google Analytics cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
IP anonymization We have activated the IP anonymization feature on this website. Your IP address will be shortened by Google within the European Union or in other states that are party to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage for the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent these cookies being stored by selecting the appropriate settings in your browser; please note, however, that doing so may mean you will not be able to enjoy the full functionality of this website. You can also prevent the data generated by cookies about your use of the website (including your IP address) from being passed to Google and from being processed by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to data collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this website: Disable Google Analytics.
Outsourced data processing
We have entered into an agreement with Google for the outsourcing of our data processing and fully implement the strict requirements of the German and European data protection authorities when using Google Analytics.
Demographic data collection by Google Analytics
This website uses the «demographic features» of Google Analytics. This allows reports to be created containing statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising by Google and third-party visitor data. This data cannot be attributed to a specific person. You can disable this feature at any time via the ad settings in your Google account, or you can prohibit the collection of your data by Google Analytics as described under «Objection to data collection».
7.2 GOOGLE ADSENSE
This website uses Google AdSense, a service for including advertisements from Google Inc. («Google»). It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google AdSense uses «cookies». These are text files that are stored on your computer to allow an analysis of the use of the website. Google AdSense also uses so-called web beacons (invisible graphics) through which information such as visitor traffic on these pages can be evaluated.
The information generated by cookies and web beacons relating to your use of this website (including your IP address) and the delivery of advertising formats will be transmitted to a Google server in the USA and stored there. This information may be disclosed by Google to Google’s contractual partners. However, Google will not merge your IP address with any other of your data that it has stored.
AdSense cookies are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
You can prevent these cookies being stored by selecting the appropriate settings in your browser. Please note, however, that doing so may mean you will not be able to use the full functionality of this website. By using this website, you consent to the processing of data relating to you by Google in the manner and for the purposes set out above.
7.3 GOOGLE ANALYTICS REMARKETING
Our websites use the features of Google Analytics Remarketing in conjunction with the cross-device capabilities of Google AdWords and Google DoubleClick. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This feature makes it possible to link target audiences for promotional marketing created with Google Analytics Remarketing to the cross-device features of Google AdWords and Google DoubleClick. This allows advertising to be displayed based on your personal interests, identified on the basis of your previous usage and browsing behavior on one device (e.g. mobile phone), on other devices (such as a tablet or computer).
If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. That way, the same personalized promotional messaging can be placed on any device on which you sign in to your Google account.
To support this feature, Google Analytics collects Google-authenticated user IDs that are temporarily linked to our Google Analytics data to define and create target audiences for cross-device ad promotion.
You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google account by following this link:
The aggregation of data collected in your Google account is based solely on your consent, which you may give or withdraw from Google (Art. 6 (1) (a) DSGVO). In the case of data collection operations not merged into your Google account (for example, because you do not have a Google account or have objected to data merging), the collection of data is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing anonymous user behavior for promotional purposes.
7.4 GOOGLE ADWORDS AND GOOGLE CONVERSION TRACKING
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States («Google»).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad served by Google, a conversion tracking cookie is set. Cookies are small text files that your internet browser stores on your computer. These cookies expire after 30 days and are not used for personal identification of the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and the website can tell that the user clicked on the ad and was directed to that page.
Each Google AdWords advertiser receives a different cookie. Thus, cookies cannot be tracked through the website of an AdWords advertiser. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Advertisers are told the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, advertisers do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can easily opt-out of this by disabling the Google Conversion Tracking cookie in your internet browser under User Preferences. You will then not be included in the conversion tracking statistics.
“Conversion cookies» are stored based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
7.5 GOOGLE RECAPTCHA
We use «Google reCAPTCHA» (hereinafter «reCAPTCHA») on our websites. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA («Google»).
The purpose of reCAPTCHA is to check whether the data entered on our website (for example, in a contact form) was entered by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor on the basis of various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various types of information (e.g. IP address, time spent by the visitor on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place.
Data processing is based on Art. 6 (1) (f) DSGVO. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.
7.6 FACEBOOK PIXELS
Our website measures conversions using visitor action pixels from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA («Facebook»).
These allow the behavior of site visitors to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows an analysis of the effectiveness of Facebook advertisements for statistical and market research purposes and their future optimization.
The data collected is anonymous for us as the operator of this website, and we cannot use it to draw any conclusions about the identity of users. However, the data is stored and processed by Facebook so that it is possible to make a connection to the user’s profile and Facebook can use the data for its own advertising purposes in accordance with its data usage guidelines. This will allow Facebook to display advertisements on Facebook pages and on third-party sites. As the website operator we have no control over how this data is used.
You can also disable the «Custom Audiences» remarketing feature in the ads settings section at https://www.facebook.com/ads/preferences/?entryproduct=adsettings_screen. You will first need to log into Facebook.
If you do not have a Facebook account, you can disable Facebook’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
We use Hotjar, a web analytics tool from Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta. Using Hotjar, the interactions of randomly selected, individual website visitors with the content of our website are recorded in an anonymized form. Hotjar creates a log, for example of mouse movements and clicks, which will allow us to continually optimize our online offering. In addition, Hotjar evaluates the following information for statistical purposes: operating system data, browser, incoming and outgoing links, geographical origin, as well as the resolution and type of terminal device accessing our website content. Via Hotjar we also offer the possibility of anonymous user «feedback polls» in which users can submit a voluntary assessment of our website. The information gathered is not connected to a person’s identity, is stored by Hotjar Ltd., and is not shared with any other third party. For additional information on features and data usage via Hotjar please visit: https://www.hotjar.com/privacy (cf. the category «Passive Collection»).
Cookies are stored for 365 days.
If you do not want Hotjar to be used for website analysis, you can opt-out of Hotjar by setting a DoNotTrack header in your browser on all websites that use Hotjar. For more information go to: https://www.hotjar.com/opt-out.
8. SOCIAL MEDIA
8.1 PINTEREST PLUGIN
On our website we use social plugins of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA («Pinterest»).
When you visit a page containing such a plugin, your browser establishes a direct connection to Pinterest’s servers. The plugin transmits log data to the server of Pinterest in the USA. This log data may include your IP address, the address of websites visited that also contain Pinterest features, browser type and settings, date and time of the request, how you use Pinterest, and cookies.
Further information about the purpose, scope and further processing and use of the data by Pinterest, as well as your rights and options to protect your privacy, can be found in Pinterest’s privacy notices at: https://about.pinterest.com/de/privacy-policy.
9. PLUGINS AND TOOLS
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages containing a YouTube plugin, a connection is established to YouTube’s servers. This will tell the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our online content appealing. This constitutes a legitimate interest pursuant to Art. 6 (1) (f) DSGVO.
Our website uses plugins provided by the Vimeo video portal. This service is provided by Vimeo Inc. 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages containing a Vimeo plug-in, a connection is established to Vimeo’s servers. This will tell the Vimeo server which of our pages you have visited. In addition, Vimeo will receive your IP address. This also applies if you are not logged into Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.
If you are logged into your Vimeo account, you allow Vimeo to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
10. PAYMENT SERVICE PROVIDERS
10.1 DATA TRANSMISSION ON CONTRACT CONCLUSION FOR ONLINE SHOPS, DEALERS AND MAIL ORDERS
We transmit personal data to third parties only if this is necessary in the context of contract processing, for example to the companies entrusted with the delivery of the goods or the credit institution entrusted with payment processing. Your data will not be transmitted for any other purpose, or only if you have expressly consented to the transmission. Your data will not be disclosed to third parties without your express consent, for example for advertising purposes.
The basis for data processing is Art. 6 (1) (b) DSGVO, which allows the processing of data to fulfill a contract or for pre-contractual measures.
On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as «PayPal»).
If you choose to pay via PayPal, the payment details you enter will be sent to PayPal. The transfer of your data to PayPal is based on Art. 6 (1) (a) DSGVO (consent) and Art. 6 (1) (b) DSGVO (processing to fulfill a contract). You have the possibility to revoke your consent to data processing at any time. A revocation does not affect the processing of data previously collected.
10.3 IMMEDIATE BANK TRANSFER
On our website we accept immediate payment via «Sofortüberweisung». The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter referred to as «Sofort GmbH»). «Sofortüberweisung» provides us with real-time payment confirmations, allowing us to fulfill our end of the contract right away.
If you opt for the payment method «Sofortüberweisung», you will be submitting a PIN and a valid TAN to Sofort GmbH so that it can access your online banking account. After logging in, Sofort GmbH will automatically check your account balance and perform the transfer to our account using the TAN you supply. It will then send us an immediate transaction confirmation. After logging in, your income/transactions???, your overdraft facility and the existence of other accounts and their balances will be automatically checked.
In addition to the PIN and TAN, the payment details you provide as well as personal data will be sent to Sofort GmbH. Your personal data includes your first and last name, address, telephone number(s), email address, IP address and any other data required for payment processing. The transmission of this data is necessary to identify you securely and to prevent attempts of fraud.
The transfer of your data to Sofort GmbH is based on Art. 6 (1) (a) DSGVO (consent) and Art. 6 (1) (b) DSGVO (processing to fulfill a contract). You have the possibility to revoke your consent to data processing at any time. A revocation does not affect the processing of data previously collected. For details on payment by “Sofortüberweisung”, please refer to the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.
10.5 PAYMENT VIA KLARNA
In order to be able to offer you Klarna’s payment options, we will pass to Klarna certain of your personal information, such as contact and order details, in order for Klarna to assess whether you qualify for their payment options and to tailor the payment options for you. General information on Klarna you can find here . Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarnas privacy statement .
In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer you the following payment methods. Payment is to be made to Klarna.
10.5.1. Pay in 14 days: The payment period is 14 days from shipment of the goods or tickets/ availability date of the service. You can find the complete terms and conditions for the markets where this payment method is available here: Germany, Austria and the Netherlands .
10.5.2. Direct Debit: Available in Germany, Sweden, Austria and the Netherlands. Your account will be debited after shipment of the goods or tickets/ availability date of the service or in case of a subscription in accordance with the timelines communicated. You will be notified about the date(s) by email.
The payment methods Pay in 14 days and direct debit are only available in case of a positive credit assessment. For this purpose, during the order process and handling of your purchase, we forward your data for an address and credit check to Klarna. We can only offer you the payment methods available based on the result of the credit check. General information about Klarna and the user terms per country can be found on klarna.com. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarnas privacy statement.
10.6. PURCHASE VIA CREDITCARD, EPS AND IDEAL
By chosing the payment method «credit card», «EPS» or «iDeal» the necessary transaction data is transferred to BS PAYONE GmbH (Lyoner Straße 9, 60528 Frankfurt/Main) in order to complete your purchase. You can find more information here: PAYONE Privacy