PRIVACY POLICY
Privacy Policy pursuant to the General Data Protection Regulation
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data is any information relating to an identifiable natural person.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Zuzanna Jeske, HOT DOGGIES Zuzanna Jeske, Św. Marcin 45, 61-806 Poznań, Poland, Phone: +48 798 887082, e-mail: zuza.jeske@gmail.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when you visit our website
2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called server log files). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:
- our visited website
- date and time of access
- amount of data sent in bytes
- source/reference from which you reached the page
- browser used
- operating system used
- IP address used (if applicable, in anonymised form)
The data is processed in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser bar.
3) Hosting & Content Delivery Network
Shopify
We use a content delivery network (CDN) of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data may also be transferred to:
- Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
- Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content or scripts faster via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) (f) GDPR. We have concluded a data processing agreement with the provider which ensures the protection of our website visitors' data and prohibits its unauthorised disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
For data transfers to the USA, the recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your end device for longer and store information about your page settings (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of cookie settings in your web browser.
Personal data is processed by the cookies we use in accordance with Art. 6 (1) (b) GDPR for the performance of a contract, in accordance with Art. 6 (1) (a) GDPR where you have given your consent, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible, user-friendly and effective design of the website.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, accept them in certain cases or generally refuse them.
Please note that if you do not accept cookies, some functions and services of our website may not be available to you.
5) Contacting us
When you contact us (e.g. via the contact form or by e-mail), personal data is collected. If you use the contact form, you will be informed which data is collected. This data is stored and used exclusively for the purpose of answering your enquiry or contacting you, and for the associated technical administration.
The legal basis for processing this data is our legitimate interest in answering your enquiry in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, Art. 6 (1) (b) GDPR is an additional legal basis for the processing. Your data will be deleted once your enquiry has been dealt with, provided that the circumstances indicate that the matter has been conclusively resolved and there are no statutory retention obligations to the contrary.
6) Data processing when opening a customer account and for contract processing
In accordance with Art. 6 (1) (b) GDPR, personal data is collected and processed to the extent necessary for the performance of a contract or for opening a customer account. The data required is indicated in the respective input forms. You can delete your customer account at any time by sending a message to the controller at the address given above. We store and use the data you provide for the purpose of processing the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in view of the retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data as permitted by law, about which we inform you below.
7) Use of customer data for direct marketing
7.1 Subscription to our newsletter
If you subscribe to our newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Any further information is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you agree to receive it. We will then send you a confirmation e-mail asking you to confirm, by clicking the corresponding link, that you wish to receive the newsletter in future.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. When you subscribe to the newsletter, we store your IP address recorded by your internet service provider (ISP) as well as the date and time of subscription so that we can trace any possible misuse of your e-mail address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for advertising by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. After you unsubscribe, your e-mail address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to further use of the data as permitted by law, about which we inform you in this policy.
7.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods, we reserve the right to regularly send you offers by e-mail for goods from our range that are similar to those already purchased. Pursuant to Section 7 (3) of the German Act against Unfair Competition (UWG), we do not need to obtain separate consent from you for this.
In this respect, data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. You will only incur transmission costs at the basic rates for this. Once we receive your objection, your e-mail address will no longer be used for advertising purposes.
7.3 Klaviyo
Our e-mail newsletters are sent via the following service provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when subscribing to the newsletter to this service provider in accordance with Art. 6 (1) (f) GDPR so that it can send the newsletter on our behalf.
Provided you have given your express consent in accordance with Art. 6 (1) (a) GDPR, the service provider also statistically evaluates the success of newsletter campaigns using so-called web beacons or tracking pixels contained in the e-mails sent, which measure the number of opened e-mails and specific interactions with the content of the newsletter. In the process, information about your end device (e.g. time of access, IP address, browser type and operating system) is also collected and analysed. This data is not, however, combined with other data stocks.
You can withdraw your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with this service provider which obliges it to protect our customers' data and not to pass it on to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
If we offer in our online shop the option of being informed by e-mail when selected, temporarily unavailable items become available again, you can register for our e-mail availability notification service. If you register for this service, we will send you a one-time notification about the availability of the item you selected. The only mandatory information for sending the notification is your e-mail address. Any further information is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending the notification. This means that we will only send you a notification once you have expressly confirmed that you agree to receive such notifications. We will then send you a confirmation e-mail asking you to confirm, by clicking the corresponding link, that you wish to receive such notifications.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. When you register for our e-mail availability notification service, we store your IP address recorded by your internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later date. The data we collect when you register for this service is used exclusively to inform you about the availability of the relevant item in our online shop. You can unsubscribe from the availability notification service at any time by sending a corresponding message to the controller named at the beginning. After you unsubscribe, your e-mail address will be deleted from our notification distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to further use of the data as permitted by law, about which we inform you in this policy.
8) Data processing for order processing
8.1 Where necessary for the performance of the contract and the delivery of the goods, the personal data we collect is passed on to the transport company commissioned with the delivery. Where necessary for payment processing, we pass on your payment data to the commissioned credit institution. Details of the payment service providers we use are given below. The legal basis for passing on the data is Art. 6 (1) (b) GDPR.
8.2 Use of payment service providers
- Shopify Payments
On this website we offer one or more online payment methods operated by the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you select a payment method of this provider where you make an advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and card details, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) (b) GDPR. In this case, your data is passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this.
8.3 Electronic withdrawal function for distance contracts
Consumers who conclude contracts on this website that are subject to a statutory right of withdrawal have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.
To provide the electronic withdrawal function, we use a solution from the following provider: Revoq BuschBytes (Jonas Busch), Hofstraße 2-4, 51061 Köln, Germany.
When using the withdrawal function, in addition to information identifying the contract concerned, further personal data of the consumer, such as name and e-mail address, must be entered or confirmed.
This information is first collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution in accordance with Art. 6 (1) (f) GDPR, then used to confirm receipt of the withdrawal by e-mail on our behalf, and subsequently forwarded to us. We then process the forwarded information for the proper handling of the withdrawal in accordance with Art. 6 (1) (b) and (c) GDPR, on the basis of our legal obligation to provide consumers with an electronic withdrawal function for distance sales contracts concluded against payment.
The information collected by the provider is routinely deleted once the withdrawal has been fully processed, unless statutory retention obligations apply.
We have concluded a data processing agreement with the provider which protects the data processed within the withdrawal function and prohibits its unauthorised disclosure to third parties.
9) Web analytics
9.1 Microsoft Clarity
This website uses a web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA
Using cookies or comparable technologies (tracking pixels, web beacons, algorithms for reading information from the end device and browser), the service collects and stores pseudonymised visitor data, including information about the end device used such as the IP address and browser information. It does so in order to statistically analyse user behaviour on our website and to create pseudonymised user profiles. Among other things, this enables behavioural analyses and so-called heat maps showing the duration of a visit and interactions with the website content (such as text input, scrolling, clicks and mouse-overs). Pseudonymisation generally rules out a direct link to a specific person. The data is not combined with personal data collected in any other way that directly identifies you.
All processing described above, in particular the reading or storing of information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with this provider which obliges it to protect our website visitors' data and prohibits its unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
9.2 Shopify Analytics
This website uses a web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading information about end devices and browsers), the service collects and stores pseudonymised visitor data, including information about the end device used such as the IP address and browser information, in order to statistically analyse user behaviour on our website and to create pseudonymised user profiles. Pseudonymisation generally rules out a direct link to a specific person. The data is not combined with unencrypted personal data collected in any other way.
All processing described above, in particular the reading or storing of information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with the provider which protects our website visitors' data and prohibits its disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
10) Retargeting/ Remarketing/ Recommendation advertising
10.1 Meta Pixel with Advanced Matching
Within our online offer, we use the “Meta Pixel” with Advanced Matching of the following provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”).
When you click on an advertisement we have placed on Facebook or Instagram, the “Meta Pixel” adds a parameter to the URL of our landing page. After the redirect, this URL parameter is stored in your browser by means of a cookie set by our landing page itself.
On the one hand, this enables Meta to identify visitors to our online offer as a target group for the display of advertisements (“Ads”). Accordingly, we use the service to display the ads we place on Facebook and/or Instagram only to users who have shown an interest in our online offer or who have certain characteristics (e.g. interest in certain topics or products, determined on the basis of the websites visited) that we pass on to Meta (so-called “Custom Audiences”).
On the other hand, the “Meta Pixel” makes it possible to track whether users were redirected to our website after clicking on an ad and what actions they take there (so-called “Conversion Tracking”).
In addition to the “Meta Pixel”, which transmits data to Meta via your browser, the “Meta Conversions API” may also be used. If it is used, information about certain actions on our website (so-called “events”, e.g. page views, adding products to the cart, starting the checkout or placing an order) is transmitted via the interface not through your browser but directly from our server to Meta's servers. This serves to make the measurement of the success of our ads more reliable, for example if transmission via the browser does not take place or only takes place incompletely due to technical restrictions. Within the “Meta Conversions API”, the following data in particular may be transmitted to Meta: type and time of the event, URL visited, information about the ordered products and their value, your IP address, information about your browser and end device (user agent) and identifiers stored in Meta cookies.
In order to better identify users whose data we have received within business or business-like relationships for the purpose of statistical analysis, we use the Advanced Matching function within conversion tracking. For this purpose, we transmit customer data (primarily e-mail addresses and telephone numbers, but also names and addresses) electronically to Meta via the “Meta Pixel” and, if used, the “Meta Conversions API”. Meta does not gain access to the data in plain text, as the information is converted into an unreadable string of characters by means of a hash function before or during transmission. Meta can then use the converted information solely to match it with existing Meta accounts created by the data subjects. This enables user interactions to be tracked across all services and devices linked to the respective Meta account.
To avoid the same information being recorded twice by the “Meta Pixel” and the “Meta Conversions API”, each event is assigned an identifier on the basis of which Meta merges the transmitted data.
All transmitted data is stored and processed by Meta in such a way that it can be assigned to the respective user profile, and Meta may use this data for its own advertising purposes in accordance with the Meta Privacy Policy (https://www.facebook.com
All processing described above, in particular the setting of cookies to read information from the end device used and the server-side transmission of data via the “Meta Conversions API”, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. After you withdraw your consent, no more data will be transmitted to Meta via the “Meta Conversions API” either.
We are jointly responsible with Meta as joint controllers (Art. 26 GDPR) for the collection of data via the “Meta Pixel” and the “Meta Conversions API” and its transmission to Meta. For this purpose, we have concluded a joint controller agreement with Meta, the essential content of which can be found at https://www.facebook.com
With regard to the analysis of the data, the matching of the contact data transmitted to Meta, its assignment to previously defined events and the preparation of measurement and analysis reports, Meta acts as our processor in accordance with Art. 28 GDPR and is obliged to protect the data of our website visitors and customers in accordance with the data processing agreement available at https://facebook.com
The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, data may also be transferred to the servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
10.2 Google Ads Conversion Tracking
This website uses the online advertising programme “Google Ads” and, within Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising material (so-called Google Adwords). On the basis of the advertising campaign data, we can determine how successful individual advertising measures are. In this way, we aim to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.
When Google Ads is used, personal data may also be transferred to the servers of Google LLC in the USA.
Details of the processing operations triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com
All processing described above, in particular the setting of cookies to read information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com
In order to target advertising to users whose data we have received within business or business-like relationships, we use the Customer Match function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily e-mail addresses and telephone numbers) electronically to Google. Google does not gain access to the data in plain text, but automatically encrypts the information in the customer files during the transfer process using a special algorithm. The encrypted information can then be used by Google solely to match it with existing Google accounts created by the data subjects. This enables personalised advertising to be displayed across all Google services linked to the respective Google account.
Customer data is only transmitted to Google if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future. Further information on the data protection measures taken by Google in connection with the Customer Match function can be found here: https://support.google.com
Google's privacy policy can be viewed here: https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
10.3 Pinterest Tag Conversion Tracking
This website uses a conversion tracking service of the following provider: Pinterest Europe Limited, 3rd Floor, Waterloo Exchange, Waterloo Road, Dublin 4, Ireland
If you have been redirected to our website from an advertisement placed on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
In the process, certain end device and browser information, including your IP address, is read by the tracking function in order to record and analyse actions previously defined by us (completed transactions, leads, enquiries on the website, product page views). This enables statistics to be compiled on user behaviour on our website after being redirected by an advertisement, which we use to optimise our offer.
All processing described above, in particular the setting of cookies to read information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with this provider which obliges it to protect our website visitors' data and prohibits its unauthorised disclosure to third parties.
10.4 TikTok Pixel
This website uses a conversion tracking service of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
If you have been redirected to our website from an advertisement placed on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
In the process, certain end device and browser information, including your IP address, is read by the tracking function in order to record and analyse actions previously defined by us (completed transactions, leads, enquiries on the website, product page views). This enables statistics to be compiled on user behaviour on our website after being redirected by an advertisement, which we use to optimise our offer.
All processing described above, in particular the setting of cookies to read information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded a data processing agreement with this provider which obliges it to protect our website visitors' data and prohibits its unauthorised disclosure to third parties.
11) Website functionalities
11.1 Google Maps
This website uses Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive maps with geographical information. We use this service to show you our location and make it easier for you to find us.
As soon as you call up the subpages in which a Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers; in this context, personal data may also be transferred to the servers of Google LLC in the USA. This happens regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want this, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. This evaluation is carried out in particular in accordance with Art. 6 (1) (f) GDPR on the basis of Google's legitimate interests in displaying personalised advertising, market research and/or designing its website in line with demand. You have the right to object to the creation of these user profiles, for which you must contact Google directly.
If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by switching off JavaScript in your browser. Google Maps, and therefore the map display on this website, can then not be used.
Google's terms of use can be viewed at https://policies.google.com
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website (“Google Privacy Policy”): https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
11.2 Google Customer Reviews (formerly Google Certified Shops programme)
We work with Google within the “Google Customer Reviews” programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This programme gives us the opportunity to obtain customer reviews from users of our website. After you have made a purchase on our website, you will be asked whether you would like to take part in an e-mail survey by Google. If you give your consent in accordance with Art. 6 (1) (a) GDPR, we will pass on your e-mail address to Google. You will receive an e-mail from Google Customer Reviews asking you to rate your purchase on our website. Your review will then be combined with our other reviews and displayed in our Google Customer Reviews badge and in our Merchant Center dashboard. Your review will also be used for Google seller ratings. When Google Customer Reviews is used, personal data may also be transferred to the servers of Google LLC in the USA.
You can withdraw your consent at any time by sending a message to the controller or to Google.
Further information on Google's data protection in connection with the Google Customer Reviews programme can be found at the following link: https://support.google.com
Further information on Google's data protection in connection with Google seller ratings can be found at the following link: https://support.google.com
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
Further information on Google's data protection can be found here: https://business.safety.google
12) Miscellaneous
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain effective user consent for cookies and cookie-based applications that require consent.
The “Cookie Consent Tool” is displayed to users as an interactive user interface when they access the page, in which consent to certain cookies and/or cookie-based applications can be given by ticking the corresponding box. Through the use of the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for the processing is Art. 6 (1) (c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
We have concluded a data processing agreement with the provider which protects our website visitors' data and prohibits its unauthorised disclosure to third parties.
Further information on the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
13) Rights of the data subject
13.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification regarding rectification or erasure of personal data or restriction of processing pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent given pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR.
13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA USED FOR SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and, if relevant, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When personal data is processed on the basis of express consent in accordance with Art. 6 (1) (a) GDPR, this data is stored until the data subject withdraws their consent.
If there are statutory retention periods for data processed within the framework of legal or similar obligations on the basis of Art. 6 (1) (b) GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in further storage.
When personal data is processed on the basis of Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (2) GDPR.
Unless otherwise stated in the information in this policy on specific processing situations, stored personal data will also be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.
