data protection
Data collection, use and disclosure
As a customer, you have the right to receive information about your personal data stored by us, to change it or to delete it, provided there are no legal retention obligations to the contrary. You can also object to the use of your data for advertising purposes.
We only process personal data (hereinafter referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Article 4, Paragraph 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is considered to be any process carried out with or without the help of automated processes or any series of processes carried out in this context with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading, querying, using, disclosing by transmission, dissemination or any other form of provision, comparison or linking, restricting, deleting or destroying.
With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. We will also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
Our data protection declaration is structured as follows:
I. Information about us as controllers
II. Rights of users and those affected
III. Information on data processing
Cookies
Elenoas Bungalows
Olympou
64007 Nea Heraklitsa
Greece
Email: info@elenoas-bungalows.gr
Persons authorized to represent
Emmanouil Vournelis
Company name: Elenoas Bungalows
II. Rights of users and those affected
With regard to the data processing described in more detail below, users and those affected have the right
for confirmation as to whether data concerning you is being processed, for information about the data processed, for further information about data processing and for copies of the data (see also Article 15 GDPR);
to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);
to the immediate deletion of the data concerning you (see also Art. 17 GDPR), or, alternatively, to the extent that further processing is necessary in accordance with Art. 17 Para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
to receive the data concerning you and provided by you and to transmit this data to other providers/responsible parties (see also Art. 20 GDPR);
to complain to the supervisory authority if you are of the opinion that the data concerning you is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 Paragraph 1, 18 GDPR teach. However, this obligation does not apply if this notification is impossible or involves disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.
According to Article 21 of the GDPR, users and those affected also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6 (1) (f) of the GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any legal retention obligations and no different information is subsequently provided about individual processing procedures.
Subscription to posts
If you publish posts on our website, we also offer you the opportunity to subscribe to any follow-up posts from third parties. In order to be able to inform you about these follow-up posts by email, we process your email address.
The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent to this subscription at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in the respective email.
Cookie Manager
To obtain consent for the use of technically unnecessary cookies on the website, the provider uses a cookie manager.
When the website is accessed, a cookie with the settings information is stored on the user's device so that consent does not have to be asked on a subsequent visit.
The cookie is required to obtain legally compliant consent from the user.
The user can prevent or stop the installation of cookies through the settings of their browser.
Cookies
a) Session cookies/session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored and stored on your device by the Internet browser you use. These cookies process certain information about you on an individual basis, such as your browser or location data or your IP address.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offering of a shopping cart function.
The legal basis for this processing is Art. 6 Para. 1 lit b.) GDPR, provided that these cookies data are processed for the purpose of initiating or executing a contract.
If the processing does not serve to initiate or process a contract, our legitimate interest lies in improving the functionality of our website. The legal basis is then Article 6 Paragraph 1 Letter f) GDPR.
When you close your internet browser, these session cookies are deleted.
b) Third-party cookies
Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysis or the functionality of our website.
Please see the information below for details, in particular the purposes and legal basis for processing such third-party cookies.
c) Possibility of elimination
You can prevent or restrict the installation of cookies by setting your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you use. If you have any questions, please use the help function or documentation of your Internet browser or contact the manufacturer or support. However, with so-called Flash cookies, the processing cannot be prevented via the browser settings. Instead, you have to change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may result in not all functions of our website being fully usable.
Contest
We offer you the opportunity to participate in competitions via our website. If you take part in one of our competitions, the data you enter when participating will be processed without your further consent, but of course only for the purpose of carrying out and processing the respective competition.
As part of the processing of the competition, we will pass on your data to the transport company responsible for delivering the goods or to a financial service provider if the transfer is necessary for the delivery or payment of your prize. If your data is published in the event of a win, you will be informed of this as part of the declaration of consent.
The legal basis for passing on the data is then Article 6 Paragraph 1 Letter b) GDPR.
You can revoke your consent to the processing of data for participation in our competitions at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation.
Contact inquiries/contact options
If you contact us via contact form or email, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request - without it, we cannot answer your request or at best respond to a limited extent.
The legal basis for this processing is Article 6 Paragraph 1 Letter b) GDPR.
Your data will be deleted if your request has been answered conclusively and deletion does not conflict with any legal retention obligations, such as in the event of any subsequent contract processing.
Customer account / registration function
If you create a customer account with us via our website, we will use the data you entered during registration (e.g. your name, address or email address) exclusively for pre-contractual services, for contract fulfillment or for the purpose of Customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called wish list function) collect and save. At the same time, we then save the IP address and the date of your registration and time. Of course, this data will not be passed on to third parties.
As part of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data we collect is used exclusively to provide the customer account.
If you consent to this processing, Article 6 Paragraph 1 Letter a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 Para. 1 lit. b) GDPR.
You can revoke your consent to open and maintain your customer account at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.
Newsletter
If you register for our free newsletter, the data requested from you, i.e. your email address and - optionally - your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send the newsletter, describe the content specifically and refer you to this data protection declaration. We use the data collected exclusively for sending newsletters - which is why they are not passed on to third parties.
The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR.
You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in every newsletter.
User contributions, comments and ratings
We offer you the opportunity to publish questions, answers, opinions or reviews, hereinafter referred to as “contributions,” on our website. If you take advantage of this offer, we will process and publish your contribution, the date and time of submission and the pseudonym you may have used.
The legal basis for this is Article 6 Paragraph 1 Letter a) GDPR. You can revoke your consent at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation.
We also process your IP and email address. The IP address is processed because we have a legitimate interest in taking or supporting further steps if your contribution encroaches on the rights of third parties and/or is otherwise unlawful.
The legal basis in this case is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the legal defense that may be necessary.
Online job applications / publication of job advertisements
We offer you the opportunity to apply to us via our website. With these digital applications, we collect and process your applicant and application data electronically to process the application process.
The legal basis for this processing is Section 26 Paragraph 1 Sentence 1 BDSG in conjunction with Article 88 Paragraph 1 GDPR.
If an employment contract is concluded after the application process, we will store the data you provided during your application in your personnel file for the purpose of the usual organizational and administrative process - of course, taking into account the further legal obligations.
The legal basis for this processing is also Section 26 Paragraph 1 Sentence 1 BDSG in conjunction with Article 88 Paragraph 1 GDPR.
If an application is rejected, we automatically delete the data transmitted to us two months after the rejection was announced. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, for example due to the burden of proof under the AGG.
The legal basis in this case is Article 6 Paragraph 1 Letter f) GDPR and Section 24 Paragraph 1 No. 2 BDSG. Our legitimate interest lies in legal defense and enforcement.
If you expressly consent to a longer storage of your data, for example for your inclusion in an applicant or interested party database, the data will be further processed based on your consent. The legal basis is then Article 6 Paragraph 1 Letter a) GDPR. Of course, you can revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR by notifying us with effect for the future.
Checking creditworthiness and scoring
If we give you the basic option of paying by invoice as part of our range of goods or services and you make use of this, we reserve the right to provide a credit rating report on a mathematical basis from a credit agency (such as Creditreform, Schufa, Bürgel or infoscore). -statistical procedures. For this purpose, your data, to the extent that it is contractually relevant, such as your name and address, will be forwarded to the credit agency. We use the subsequent information about the statistical probability of non-payment to decide whether we offer you payment by invoice.
The legal basis for this processing is our legitimate interest in the reliability of the claim in accordance with Article 6 Paragraph 1 Letter f) GDPR.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or our web space provider through your Internet browser. These so-called server log files contain, among other things, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our website that you visit, the date and time of the respective access as well as the IP address of the Internet connection from which our website is used.
The data collected in this way will be stored temporarily, but not together with other data about you.
This storage takes place on the legal basis of Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidentiary purposes. Otherwise, the data will be completely or partially excluded from deletion until an incident has been finally clarified.
Contract execution
The data you provide to use our range of goods and/or services will be processed by us for the purpose of contract processing and is necessary to this extent. Contract conclusion and contract processing are not possible without providing your data.
The legal basis for processing is Article 6 Paragraph 1 Letter b) GDPR.
We delete the data once the contract has been fully processed, but we must observe the tax and commercial law retention periods.
As part of the contract processing, we pass on your data to the transport company commissioned to deliver the goods or to the financial service provider, if the transfer is necessary for the delivery of goods or for payment purposes.
The legal basis for passing on the data is then Article 6 Paragraph 1 Letter b) GDPR.
Facebook
To advertise our products and services and to communicate with interested parties or customers, we maintain a company presence on the Facebook platform.
We are jointly responsible for this social media platform with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook's data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data and described below is Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.
The legal basis can also be the user's consent to the platform operator in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The user can revoke his consent to this at any time in the future in accordance with Art. 7 Para. 3 GDPR by notifying the platform operator.
When you access our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data serves to provide statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise to users within and outside of Facebook based on their interests. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. also link the data to the respective user account.
If the user contacts you via Facebook, the user's personal data entered on this occasion will be used to process the request. We will delete the user's data as long as the user's request has been answered conclusively and there are no legal retention obligations, such as in the event of subsequent contract processing.
To process the data, Facebook Ireland Ltd. Cookies may also be set if necessary.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. With Flash cookies, processing cannot be prevented via the browser settings, but rather by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may result in not all of Facebook's functions being fully usable.
Further information about the processing activities, how to prevent them and how to delete the data processed by Facebook can be found in Facebook's data policy:
https://www.facebook.com/privacy/explanation
It cannot be ruled out that processing by Meta Platforms Ireland Limited will also take place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
Instagram
To advertise our products and services and to communicate with interested parties or customers, we maintain a company presence on the Instagram platform.
We are jointly responsible for this social media platform with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Instagram's data protection officer can be reached via a contact form:
https://www.facebook.com/help/contact/540977946302970
We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data and described below is Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.
The legal basis can also be the user's consent to the platform operator in accordance with Article 6 Paragraph 1 Letter a of the GDPR. The user can revoke his consent to this at any time in the future in accordance with Art. 7 Para. 3 GDPR by notifying the platform operator.
When you access our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU, processes user data (e.g. personal information, IP address, etc.).
This user data serves to provide statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. For example, it is possible to advertise to users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. also link the data to the respective user account.
If the user contacts you via Instagram, the user's personal data entered on this occasion will be used to process the request. We will delete the user's data as long as the user's request has been answered conclusively and there are no legal retention obligations, such as in the event of subsequent contract processing.
To process the data, Facebook Ireland Ltd. Cookies may also be set if necessary.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. With Flash cookies, processing cannot be prevented via the browser settings, but rather by setting the Flash player accordingly. If the user prevents or restricts the installation of cookies, this may result in not all of Facebook's functions being fully usable.
Further information about the processing activities, how to prevent them and how to delete the data processed by Instagram can be found in Instagram's data policy:
https://help.instagram.com/519522125107875
It cannot be ruled out that processing by Facebook Ireland Ltd. also via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
YouTube
We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA.
In this respect, we would like to point out that it is possible that user data may be processed outside the European Union, particularly in the USA. This can result in increased risks for users in that, for example, subsequent access to user data can be made more difficult. We also have no access to this user data. Access is exclusively via YouTube.
YouTube's data protection information can be found at
https://policies.google.com/privacy
General links to third-party profiles
The provider uses a link to the social networks listed below on the website.
The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. The provider's legitimate interest is in improving the quality of use of the website.
The plugins are integrated via a linked graphic. Only by clicking on the corresponding graphic will the user be redirected to the service of the respective social network.
After the customer has been forwarded, information about the user is collected by the respective network. First of all, this is data such as IP address, date, time and page visited. If the user is logged into their user account of the respective network, the network operator may be able to assign the collected information from the user's specific visit to the user's personal account. If the user interacts via a “share” button on the respective network, this information can be saved in the user’s personal user account and, if necessary, published. If the user wants to prevent the collected information from being directly assigned to his user account, the user must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.
The following social networks are linked by the provider:
facebook
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration: https://www.facebook.com/policy.php
Instagram
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection declaration: https://help.instagram.com/519522125107875
LinkedIn
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.
Data protection declaration: https://www.linkedin.com/legal/privacy-policy
Pinterest
Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.
Data protection declaration: https://policy.pinterest.com/de/privacy-policy
tweet
Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA
Data protection declaration: https://twitter.com/privacy
YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA
Data protection declaration: https://policies.google.com/privacy
“Facebook” social plugin
We use the plug-in from the social network Facebook on our website. Facebook is an internet service provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website.
Facebook provides further information about possible plug-ins and their respective functions at
https://developers.facebook.com/docs/plugins/
ready for you.
If the plug-in is stored on one of the pages of our website you visit, your Internet browser will download a display of the plug-in from Facebook's servers in the USA. For technical reasons, it is necessary for Facebook to process your IP address. In addition, the date and time of the visit to our website are also recorded.
If you are logged in to Facebook while you visit one of our websites with the plug-in, the information collected by the plug-in from your specific visit will be recognized by Facebook. Facebook may assign the information collected in this way to your personal user account there. If, for example, you use the so-called “Like” button on Facebook, this information will be stored in your Facebook user account and, if necessary, published via the Facebook platform. If you want to prevent this, you must either log out of Facebook before visiting our website or prevent the Facebook plug-in from being blocked by using an add-on for your internet browser.
Facebook provides further information about the collection and use of data as well as your related rights and protection options in the following
https://www.facebook.com/policy.php
available data protection information.
“Shariff” social media buttons
We use the plug-ins from the following social networks on our website. To integrate these plug-ins, we again use the “Shariff” plug-in.
The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in improving the quality of our website.
Shariff is an open source program developed by c’t and heise. By integrating this plug-in, linked graphics prevent the social network plug-ins specified below from being integrated when you visit our website(s), on which the respective social network plug-in is integrated automatically establishes a connection to the respective server of the social network plug-in. Only when you click on one of these linked graphics will you be redirected to the service of the respective social network. Only then is information about the usage process recorded by the respective social network. This information includes, for example, your IP address, the date and time and the page of our website you visited.
If you are logged in to one of the social network services while you visit one of our websites with the corresponding plug-in, the provider of the respective social network may be able to recognize the information collected from your specific visit and assign it to your personal user account or publish here. If, for example, you use the so-called “share” button of the respective social network, this information may be stored in your user account there and published via the platform of the respective social network provider. If you want to prevent this, you must either log out of the respective social network before clicking on the graphic or make the appropriate settings in your social network user account.
Further information about “Shariff” is available at heise
http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html
ready.
The following social networks are integrated into our website:
Facebook of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Data protection information can be found at https://www.facebook.com/policy.php
Twitter of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.
Data protection information can be found at https://twitter.com/privacy
“Twitter” social plugin
We use the plug-in from the social network Twitter on our website. Twitter is an internet service provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, hereinafter referred to as “Twitter”.
If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website.
If the plug-in is stored on one of the pages of our website you visit, your Internet browser will download a representation of the plug-in from Twitter's servers in the USA. For technical reasons, it is necessary for Twitter to process your IP address. In addition, the date and time of the visit to our website are also recorded.
If you are logged in to Twitter while you visit one of our websites with the plug-in, the information collected by the plug-in from your specific visit will be recognized by Twitter. Twitter may assign the information collected in this way to your personal user account there. If, for example, you use the so-called “Share” button on Twitter, this information will be stored in your Twitter user account and, if necessary, published via the Twitter platform. If you want to prevent this, you must either log out of Twitter before visiting our website or make the appropriate settings in your Twitter user account.
Twitter provides further information about the collection and use of data as well as your related rights and protection options in the following
https://twitter.com/privacy
available data protection information.
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google shortens the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an analysis of visits to our website and usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it does not associate your IP address with other data. In addition, Google is keeping under
https://www.google.com/intl/de/policies/privacy/partners
Further data protection information is available for you, including, for example, the options for preventing data use.
Google also offers under
https://tools.google.com/dlpage/gaoptout?hl=de
a so-called deactivation add-on along with further information about this. This add-on can be installed with common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on tells Google Analytics' JavaScript (ga.js) that information about visits to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this data protection declaration.
Adobe Typekit
External fonts from “Adobe Typekit”, a service of Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24 Republic of Ireland, hereinafter “Adobe”, are used to display the font design.
When you access the provider's website, a connection is established to the Adobe server to enable the font to be displayed or updated. Under certain circumstances, data may be transferred to servers in the USA.
_____________________
However, according to data protection supervisory authorities, the USA currently does not have an adequate level of data protection. There are therefore so-called standard contractual clauses between the provider and Adobe for the transfer of data to third countries:
https://www.adobe.com/de/privacy/eudatatransfers.html
However, these are private law agreements and therefore have no direct impact on the access options of the authorities in the USA.
_____________________
The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. The provider's legitimate interest lies in the optimization and economic operation of the website.
Through the connection, Adobe can recognize from which website a request is sent and to which IP address the display of the font is sent.
Adobe offers further information, in particular on the options for preventing data use, under the following links:
https://www.adobe.com/de/privacy.html
https://www.adobe.com/de/privacy/policies/adobe-fonts.html
Google reCAPTCHA
On our website we use Google reCAPTCHA to check and prevent interactions on our website through automated access, for example by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
Through this service, Google can determine from which website a request is sent and from which IP address you use the so-called reCAPTCHA input box. In addition to your IP address, Google may also collect other information that is necessary to offer and guarantee this service.
The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in the security of our website and in preventing unwanted, automated access in the form of spam or similar.
Google offers under
https://policies.google.com/privacy
further information on the general handling of your user data.
Google Maps
On our website we use Google Maps to display our location and to create directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
In order to enable the display of certain fonts on our website, a connection is established to the Google server in the USA when our website is accessed.
If you access the Google Maps component integrated into our website, Google stores a cookie on your device via your Internet browser. In order to display our location and create directions, your user settings and data are processed. We cannot rule out that Google uses servers in the USA.
If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in optimizing the functionality of our website.
Through the connection to Google established in this way, Google can determine from which website your request was sent and to which IP address the directions should be sent.
If you do not agree to this processing, you have the option of preventing the installation of cookies by using the appropriate settings in your internet browser. You can find details on this under “Cookies” above.
In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google. com/intl/de_de/help/terms_maps.html.
In addition, Google offers at
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
further information.
GOOGLE search function (“CSE”)
We use the “Google Custom Search Engine” (Google Custom Search Engine “CSE”) for full-text searches on the website. “CSE” is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”.
“CSE” enables a full-text search for content on our website. This search function is accessed via a “Google Custom Search” search box.
The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the user-friendliness of the website.
The function is integrated unchanged on our website as a software module from Google.
If the search is activated by entering a search term, Google uses a plugin to load the information you are looking for. At the same time, to carry out the search and display the search results, the terms entered by the user and the user's IP address are transmitted to Google.
If the user is logged into their existing Google account at the time of the search process, Google can assign the information collected to the associated user profile.
Google offers further information, in particular on the options for preventing data use, under the following links:
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
jQuery CDN
We use the service on our website to optimize the retrieval speed, design and presentation of the content of our website on different devices
jQuery CDN, a content delivery network (“CDN”). This is a service from the jQuery Foundation, hereinafter referred to as “jQuery”. jQuery is distributed for the JS Foundation via the StackPath CDN.
In order to be able to deliver the content of our website quickly, the service uses so-called JavaScript libraries. Corresponding files are loaded from the CDN server if they are not already in your browser cache when you visit another website. If you connect to the CDN server, your IP address will be recorded. It cannot be ruled out that a connection is made to a server outside the EU.
The legal basis is Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest lies in accelerating the loading times of our website and optimizing it.
To prevent the execution of jQuery's Java Script code altogether, you can install a so-called Java Script blocker, such as noscript.net or ghostery.com. However, if you prevent or restrict the execution of the Java Script code, for technical reasons this may result in not all content and functions of our website being available.
YouTube
We use YouTube on our website. This is a video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “YouTube”.
We use YouTube in connection with the “Extended data protection mode” function to be able to show you videos. If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the “Extended Data Protection Mode” function means that the data described in more detail below is only transmitted to the YouTube server when you actually start a video.
Without this “extended data protection” a connection to the YouTube server in the USA will be established as soon as you access one of our websites on which a YouTube video is embedded.
This connection is required in order to be able to display the respective video on our website via your Internet browser. In the course of this, YouTube will at least collect and process your IP address, the date and time and the website you visited. A connection is also established to Google’s “DoubleClick” advertising network.
If you are logged in to YouTube at the same time, YouTube will assign the connection information to your YouTube account. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.
For the purpose of functionality and to analyze usage behavior, YouTube permanently stores cookies on your device via your Internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by setting your Internet browser. You can find more information about this under “Cookies” above.
Google provides further information about the collection and use of data as well as your related rights and protection options in the following
https://policies.google.com/privacy
available data protection information.
WIX
a) Use of the Wix Shop software
The provider uses the shop system “WIX” from Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel, to present the offers, to process the contract and for hosting.
The legal basis for this is the initiation and/or execution of the contract in accordance with Article 6 (1) (b) GDPR.
Due to WIX's international branches, it cannot be ruled out that processing takes place outside the EU. WIX must ensure that processing by Wix and its subcontractors only takes place in third countries in which processing is permitted in accordance with the GDPR - for example via an EU adequacy decision or so-called standard contractual clauses.
“WIX” processes the following user data on behalf of the provider:
Name, email address, delivery and billing address, payment details, company name, telephone number if applicable, IP address, information about orders, as well as information about the device and browser used.
b) Web analysis WIX
By using WIX, cookies are also used on the website for web analysis. The cookies are used to transmit information, such as the time, location and frequency of the user's website visit, to a WIX server and evaluate it.
If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. What is legitimate is the analysis, optimization and economic operation of the website.
If the user does not agree to the storage of cookies, it is possible to prevent or terminate the installation of cookies by setting the browser accordingly.
Further information about data processing by WIX is available at the following link:
https://de.wix.com/about/privacy
Use of PayPal as a payment method
If you decide to pay with the online payment service provider PayPal as part of your ordering process, your contact details will be transmitted to PayPal as part of the order placed in this way. PayPal is an offer from PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal takes on the function of an online payment service provider as well as a trustee and offers buyer protection services.
The personal data transmitted to PayPal is mostly first name, last name, address, telephone number, IP address, email address, or other data that is necessary for order processing, as well as data in connection with the order such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.
This transmission is necessary to process your order with the payment method you selected, in particular to confirm your identity, to administer your payment and the customer relationship. The transmission of your data to PayPal is therefore based on Art. 6 Para. 1 lit. b GDPR.
Please note, however, that PayPal may also pass on personal data to service providers, subcontractors or other affiliated companies to the extent that this is necessary to fulfill the contractual obligations arising from your order or the personal data is to be processed in the order.
Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit reporting agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. You can find out which credit agencies these are and which data is generally collected, processed, stored and passed on by PayPal in PayPal's data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of instant transfer as a payment method
If you decide to pay with the online payment service provider Sofortüberweisung as part of your ordering process, your contact details will be sent to Sofortüberweisung as part of the order placed in this way.
Sofortüberweisung is an offer from SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany. Sofortüberweisung takes on the function of an online payment service provider that enables cashless payment of products and services on the Internet.
The personal data transmitted to Sofortüberweisung is mostly first name, last name, address, telephone number, IP address, email address, or other data that is necessary for order processing, as well as data in connection with the order such as number of items, item number, invoice amount and taxes in percent, invoice information, etc.
This transmission is necessary to process your order with the payment method you selected, in particular to confirm your identity, to administer your payment and the customer relationship. The transmission of your data to SOFORT GmbH is therefore based on Art. 6 Para. 1 lit. b GDPR.
However, please note: Personal data can also be passed on by Sofortüberweisung to service providers, subcontractors or other affiliated companies to the extent that this is necessary to fulfill the contractual obligations arising from your order or the personal data is to be processed in the order.
Under certain circumstances, the personal data transmitted to Sofortüberweisung will be transmitted by Sofortüberweisung to credit reporting agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed.
You can find out which data protection principles Sofortüberweisung applies when processing your data in the data protection information that is displayed to you during the Sofortüberweisung payment process.
If you have any further questions about the use of your personal data, you can contact Sofortüberweisung by email (datenschutz@sofort.com) or in writing (SOFORT GmbH, Data Protection, Theresienhöhe 12, 80339 Munich).
Live Chat
On our website we use the LiveChat service for analysis purposes and our live chat system. This is a service provided by LiveChat Inc., 1 International Pl, STE 1400 Boston, MA 02110 – 2619, USA, which is operated in the European Union by LiveChat Software SA. ul. Zwycięska 47, 53 – 033 Wroclaw, Poland, hereinafter referred to as “LiveChat”.
If you have given your consent for this processing, the legal basis is Article 6 (1) (a) GDPR. The legal basis can also be Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in the effective and direct support of our customers and interested parties as well as the statistical analysis of visitor behavior for the purpose of optimizing and economically operating our website.
For the statistical analysis of visitor behavior and the operation of the live chat system, LiveChat stores a cookie on your device via your Internet browser. This cookie processes the anonymized data and creates a pseudonymized user profile. However, the data collected will not be used to identify you personally.
If you do not agree to this processing, you have the option of preventing the installation of cookies by using the appropriate settings in your internet browser. You can find details on this under “Cookies” above.
LiveChat offers at
https://www.livechatinc.com/legal/privacy-policy/#main
further information on the collection and use of data as well as your rights and options for protecting your privacy.
MailChimp – Newsletter
We offer you the opportunity to register for our free newsletter via our website.
To send newsletters, we use MailChimp, a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as “The Rocket Science Group”.
The Rocket Science Group also offers:
http://mailchimp.com/legal/privacy/
further data protection information.
If you register to receive our newsletter, the data requested during the registration process, such as your email address and, optionally, your name and address, will be processed by The Rocket Science Group. In addition, your IP address and the date of your registration and time are stored. As part of the further registration process, your consent to sending the newsletter will be obtained, the content will be specifically described and reference will be made to this data protection declaration.
The newsletter subsequently sent via The Rocket Science Group also contains a so-called tracking pixel, also known as a web beacon. With the help of this tracking pixel, we can evaluate whether and when you have read our newsletter and whether you have followed any further links contained in the newsletter. In addition to other technical data, such as the data of your computer system and your IP address, the data processed is stored so that we can optimize our newsletter offer and respond to the wishes of readers. The data is used to increase the quality and attractiveness of our newsletter offering.
The legal basis for sending the newsletter and the analysis is Art. 6 Para. 1 lit. a.) GDPR.
You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation or click on the unsubscribe link contained in every newsletter.
Newsletter via WhatsApp
You can also receive our free newsletter via the instant messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc., 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as “WhatsApp”. Some of the user data is processed on WhatsApp servers in the USA. WhatsApp also offers under
https://www.whatsapp.com/legal/#privacy-policy
further data protection information
In order to receive our newsletter via WhatsApp, you need a WhatsApp user account. Details about what data WhatsApp collects during registration can be found in WhatsApp's data protection information mentioned above.
If you then register to receive our newsletter via WhatsApp, the mobile phone number you entered during the registration process will be processed by WhatsApp. In addition, your IP address and the date of your registration and time are stored. As part of the further registration process, your consent to sending the newsletter will be obtained, the content will be specifically described and reference will be made to this data protection declaration.
The legal basis for sending the newsletter and the analysis is Art. 6 Para. 1 lit. a.) GDPR.
You can revoke your consent to receive the newsletter at any time with future effect in accordance with Art. 7 Para. 3 GDPR. To do this, you simply need to inform us of your revocation. You can also block receipt of the newsletter using a setting in the WhatsApp software on your device.
WhatsApp contact
To contact us, the provider allows the customer, among other things, to contact us via the WhatsApp messenger service. WhatsApp is a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as WhatsApp, a subsidiary of Facebook.
When the user communicates with the provider via WhatsApp, both the provider and WhatsApp receive the user's mobile phone number and the information that the user has contacted the provider.
The aforementioned data will also be forwarded by WhatsApp to Facebook servers in the USA and processed by WhatsApp and Facebook in accordance with the WhatsApp privacy policy, which also includes processing for their own purposes, such as improving the WhatsApp service.
_____________________
However, according to data protection supervisory authorities, the USA currently does not have an adequate level of data protection. However, there are so-called standard contractual clauses:
https://faq.whatsapp.com/general/about-standard-contractual-clauses
However, these are private law agreements and therefore have no direct impact on the access options of the authorities in the USA.
_____________________
Further information on the purpose and scope of data collection and further processing of this data by WhatsApp and Facebook as well as related rights and setting options to protect privacy can be found in WhatsApp's data protection policy:
https://www.whatsapp.com/legal/#privacy-policy.
The legal basis for this processing and transmission to WhatsApp is Article 6 Paragraph 1 Sentence 1 b. GDPR, insofar as the contact relates to an existing contractual relationship or serves to initiate such a contractual relationship. If contact is not made based on the above purposes, the legal basis is Article 6 (1) (f) GDPR. The provider's legitimate interest is in improving the quality of service.