Privacy Policy
Protecting your privacy is important to us. We process your personal data only in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and other statutory data protection regulations, in particular the Federal Data Protection Act (BDSG). Of course, all data will be treated confidentially. With the following data protection information, we would like to explain to you in more detail how your data is handled when you use our websites.
1 General information about the collection of personal data
Basically, the collection, processing and use of personal data for the use of our website is limited to the necessary extent and the necessary data. Personal data is all data that can be related to you personally, e.g. B. Name, address, e-mail addresses, user behavior . In addition, we use the widespread SSL (Secure Socket Layer) method on our website in conjunction with the highest level of encryption supported by your web browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
Responsible entity
Responsible entity for the collection, processing and use of your personal data acc . Art. 4 para. 7 GDPR is:
Sea to Summit GmbH
represented by the managing director Jürgen Schütte
Siegfriedstr. 36
33615 Bielefeld
Germany
Phone : +49 (0) 521 988 744 34
Email: info@seatosummit.de
2 Purposes and legal bases for the processing of your personal data as well as further information on specific data processing
2.1 General processing of data from our business partners
2.1.1 Description and scope of data processing
For the processing of business relationships with our business partners (customers, suppliers, other business partners), we also store your personal data (e.g. e-mail address, postal address, telephone number). The personal data that we collect for this purpose is used internally by the departments involved in handling the business relationship.
This data may be merged and stored with the data of other orders, inquiries and business correspondence that you send us by other means (fax, post, telephone).
2.1.2 Purposes of data processing
We process your personal data for the purposes that are necessary for the fulfillment of the business relationship between you and us, such as for the following purposes:
- Preparation of offers to customers for deliveries and services
- Determination of your individual prices
- internal processing of your order
- Delivery of the ordered goods
- Inquiries to our suppliers
- contract negotiations
- Clarification of all technical aspects of the products and services from the business relationship
- payment transactions
- General business correspondence with you
If necessary, we also use the help of service providers (e.g. logistics service providers for shipping the products, banks for payment processing). We will only pass on your data to such third parties to the extent that they are necessary for the fulfillment of these tasks.
Our legitimate interest in using external service providers, such as logistics service providers for shipping your ordered goods, is to provide our services as efficiently and effectively as possible and thus as quickly and cost-effectively as possible for you. Third parties who receive personal data from our business partners are obliged to comply with data protection regulations.
We reserve the right to pass on your personal data to external service providers to carry out a credit check in order to safeguard our legitimate interest in securing our claims. We receive information from these credit agencies about your previous payment history and credit ratings. This data enables us to evaluate our business relationship and is used by us to decide on a delivery and to protect us against payment defaults.
2.1.3 Legal bases of data processing
The legal basis for the processing of your data is Art. 6 para. 1 S. 1 lit. a and f GDPR. The processing takes place on the basis of an implied consent and on the basis of our legitimate interests. Our legitimate interests follow from the purposes for data collection presented. If the business relationship is specifically aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR.
2.1.4 Duration of storage
We store your personal data for the duration of our business relationship or in accordance with the statutory retention periods.
2.2 Visiting our websites
2.2.1 Description and scope of data processing
Each time our website is accessed, our systems automatically record data and information from the computer system of the accessing computer (personal data that your browser transmits to our server). This also happens if you do not register or otherwise provide us with information, for example through active input. The following data is always collected when you visit our website:
- IP address of the user
- Date and time of the request or access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access Status/HTTP Status Code
- amount of data transferred
- Website from which the request comes (from which the user's system reaches our website)
- Website accessed by the user's system through our website
- Information about the browser type and version used
- Operating system and its interface
- Browser software language and version
This data is stored in the log files of our system. Storage together with other of your personal data does not take place regularly.
2.2.2 Purposes of data processing
The storage of the data mentioned, in particular the IP address by our systems, is only temporary for the duration of the session and is necessary to enable proper operation and proper display of the website. This processing of your data also serves the purpose of evaluating and continuing to guarantee system security and system stability as well as other administrative purposes.
If your data is stored in our log files, this also only happens to ensure the functionality of our website. In addition, we use the data to optimize and ensure the security of our information technology systems.
An evaluation of the data for marketing purposes does not take place in this context.
2.2.3 Legal bases of data processing
The legal basis for the processing and temporary storage of your personal data is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interests follow from the stated purposes for data collection.
2.2.4 Duration of storage
Your data will be deleted as soon as they are no longer required to achieve the purpose. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If your data is stored in log files, this is the case after seven days at the latest. Storage beyond this is only intended in exceptional cases, for example if this is necessary for technical reasons or to improve our systems. In this case, the IP addresses of the users are deleted or alienated so that an assignment is no longer possible.
2.2.5 Possibility of objection and elimination
The collection of your data for the provision of the website and the possible storage in log files is absolutely necessary for the operation of the website.
There is therefore no possibility of objection.
2.3 Contact form, email contact
2.3.1 Description and scope of data processing
A contact form is integrated on our website, which you can use to contact us. When using the contact form, the data entered in the input mask is transmitted to us and stored:
- Mandatory: email address
- Optional: name, phone number
In addition, your IP address and the date and time of the request are saved. Your consent will be obtained for the processing of the data during the sending process and reference will be made to this data protection declaration.
It is also possible to contact us via the e-mail addresses provided by us. In this case, your personal data transmitted by e-mail will be stored by us and processed further, in particular to process your inquiry or the reason for your contacting us.
There is no transfer of the data to third parties. The data will only be used to process the conversation.
2.3.2 Legal basis of data processing
The legal basis for the processing of your data when using the contact form is your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a GDPR.
The legal basis for the processing of your data when sending us an e-mail is Art. 6 Para. 1 S. 1 lit. a and f GDPR. The processing takes place on the basis of an implied consent and on the basis of our legitimate interests. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR.
2.3.3 Purposes of data processing
The processing of the personal data from the input mask or the e-mail sent to us only serves to process your contact with us. If you contact us by e-mail, this is to be seen as the necessary legitimate interest in the processing of the data by us. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
2.3.4 Duration of storage
We will delete your data as soon as we no longer need them to achieve the purposes presented. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is usually over when it can be inferred from the circumstances that the reason for your contacting us has been finally clarified.
Additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
2.3.5 Possibility of objection and elimination
You have the option to revoke your consent to the processing of personal data at any time. If you contact us by email, you can object to the storage of your personal data at any time. In such a case, however, the conversation with you may not be able to continue. All personal data that was saved in the course of making contact will be deleted in this case.
2.4 Opening of a customer account
2.4.1 Description and scope of data processing
You can register with a personal customer account on our website. We process the registration data to set up and manage your customer account. As a registered user, you have access to your personal customer account (by means of your e-mail address and the password you have chosen yourself), in which you can view the history of the use of our services and your personal settings, among other things. The following data is collected as part of the registration process:
- first name and last name
- password
- E-mail address
The following data is collected as part of the login process:
- E-mail address
- password
At the time of login, the following data is also stored:
- The IP address of the user
- Date and time of login
2.4.2 Legal basis of data processing
The legal basis for the processing of your data when creating the customer account is Art. 6 Para. 1 S. 1 lit. b GDPR.
2.4.3 Purposes of data processing
The processing of personal data from the registration process only serves to set up your customer account and to prevent misuse of the customer account.
2.4.4 Duration of storage
We will delete your data as soon as we no longer need them to achieve the purposes presented.
For the personal data when creating the customer account, this is the case when the contract has been fully processed or your customer account has been deleted. Your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in inform of this statement. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided for this purpose in the customer account.
Additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
2.5 Orders via our online (e-shop)
2.5.1 Description and scope of data processing
Registration in our e-shop for purchasing our products via our online sales is possible for both commercial customers and consumers. For this we also ask you for personal data (name, e-mail address, postal address, telephone number). However, we will still contact you directly to activate our e-shop functions. The personal data that you provide to us here will be used internally by the departments that deal with processing your inquiries and orders.
If necessary, your data will be merged and saved with the data of other orders that you send to us by other means of ordering (fax, post, telephone).
2.5.2 Purposes of data processing
We process your personal data for the purposes that are necessary for the fulfillment of the business relationship between you and us.
We process your personal data, which you give us for the use of our e-shop offer, for the processing of your individual inquiries and orders, such as for the following purposes:
- Checking your access authorization
- Your use of the shopping cart
- Determination of your individual prices
- internal processing of your order
- Delivery of the ordered goods
- payment transactions
- marketing measures
If necessary, we also use the help of service providers (e.g. logistics service providers for shipping your ordered products, banks for payment processing). We will only pass on your data to such third parties to the extent that they are necessary for the fulfillment of these tasks. Third parties who receive data from our customers are obliged to comply with data protection regulations. Our legitimate interest in using external service providers, such as our logistics service provider, for shipping your ordered goods is to provide our services as efficiently and effectively as possible and therefore as quickly and cost-effectively as possible for you.
We reserve the right to pass on your personal data to external service providers to carry out a credit check. We receive information from these credit agencies about your previous payment history and credit ratings. This data enables us to evaluate our customer relationship and is used by us to decide on a delivery and to protect us against payment defaults. This is also our legitimate interest.
2.5.3 Legal basis of data processing
The legal basis for processing is the conclusion and fulfillment of the purchase contract for the ordered goods, Art. 6 Para. 1 lit. b and lit. f. GDPR.
2.5.4 Duration of storage
This data will be deleted when it is no longer required for the execution of the contract (including customer service and warranty) , unless we are legally obliged to store it, e.g. due to commercial or tax storage obligations.
2.6 Electronic Newsletter
2.6.1 Description and scope of data processing
When sending our electronic newsletter, for which you can register, we process the following personal data:
- Mandatory: email address
- Voluntarily: first name, last name
In order to send the electronic newsletter, it is mandatory to provide the email address. The processing of your other data serves to personalize this contact as well as the specialization of the offers and information and is voluntary.
2.6.2 Purposes of data processing
We process your e-mail address in order to contact you for the purpose of sending our electronic newsletter, to inform you about current events and, if applicable, current developments and to maintain our contractual relationship. In addition, we use this data for advertising communications by e-mail and, if we have received your e-mail address in connection with our products and services, for advertising measures for our own similar products and services.
To enhance the user experience and personalize communication with our customers, personal data will be accessible (not stored) from outside Europe. We will ensure that the accessor has provided adequate safeguards.
2.6.3 Legal bases of data processing
In order to send our newsletter to you, we will always obtain your express declaration of consent. For this we use the so-called double opt -in procedure. After you have registered for the newsletter, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish the newsletter to be sent. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to prove your registration and to be able to clarify possible misuse of your personal data.
If we do not already process your data based on your explicit consent in exceptional cases, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and not your interests or fundamental rights and fundamental freedoms, which Protection of personal data prevail (Art. 6 Para. 1 S. 1 lit. f GDPR).
2.6.4 Duration of storage
We delete your data as soon as we no longer need them to achieve the purposes presented. We will store your personal data for advertising and information purposes, i.e. sending information and offers about services, for a maximum period of one year from the last relevant contact with you. A relevant contact exists, for example, if there is verbal, telephone or mutual written communication between and.
2.6.5 Possibility of objection and elimination
You can withdraw your consent at any time and thus unsubscribe from receiving information about current and future products, services or other information about us. You can declare your revocation by clicking on the link provided in each newsletter e-mail, by sending an e-mail to info@seatosummit.de sending a message to our contact details. If you object to the use of your data, we will no longer send you marketing communications.
2.7 General information on the use of cookies
When you visit and use our website, cookies are stored on your computer. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the browser to be clearly identified when the website is called up again.
Some of them are essential, ie they are technically necessary for the operation of our website. Other cookies are used for statistical purposes or to analyze access to our website or for marketing purposes or to be able to offer you the use of external media. Both temporary/session cookies and cookies stored for longer (so-called permanent cookies) are used. Temporary cookies are deleted again as soon as you close your browser. Permanent cookies remain for a longer period of time, but can be deleted manually at any time. Some of the cookies are placed by third parties.
The legal basis for data processing when using essential cookies is Art. 6 Para. 1 S. 1 lit. f DS-GVO, when using all other cookies, the legal basis is your consent according to Art. 6 Para. 1 S. 1 lit. a GDPR. If we do not process your data based on your explicit consent, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party and not your interests or fundamental rights and freedoms, which require the protection of personal data, predominate.
You can find detailed information about the use of the respective cookies, in particular about their purpose, the respective functional duration and to what extent they are placed by third parties or third parties have access to the data collected via the cookies, in addition to the information provided in our data protection declaration in our Cookie Policy. Depending on the category of cookies used, you will also find detailed information on the legal basis for the respective data processing here.
You can agree to the use of the respective categories of cookies individually; You can also change the consent you have given at any time under Cookie Policy or as well as by clicking on the fingerprint icon in the lower left corner of the browser or withdraw it from us.
2.8 External links
If our website links to the websites of other providers or partners, our data protection declaration does not apply to their content. We have no influence on compliance with legal data protection regulations by these third-party providers. Information about the data protection of the operators of these pages can be found on the respective websites.
2.9 Data protection for applications and in the application process
We collect and process personal data from applicants for the purpose of handling the application process (legal basis is Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR). Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by email or via a web form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
3 Disclosure of your data to third parties
We do not share personally identifiable information with any company, organization or individual outside of our company, except in one of the following circumstances:
3.1 With your consent
We pass on personal data to third-party companies, organizations or people outside of our company if you have given us your explicit consent to do so.
3.2 Processing by other entities
We may provide your personal information to our third party business partners, other trusted companies or individuals who process it on our behalf. This is always done on the basis of our instructions and in accordance with our privacy policy and other appropriate confidentiality and security measures.
3.3 For legal reasons
We will disclose your personal information to companies, organizations or individuals outside of our business if we have a good faith belief that access to, use, preservation or disclosure of that information is reasonably necessary to comply, in particular, with any applicable law, regulation or Comply with legal process or an enforceable governmental order.
4 Transfer of your data to a third country or an international organization
Unless expressly stated in this data protection declaration, your personal data will not be transferred to third countries or international organizations.
5 Automated Decision Making
Automated decision-making does not take place.
6 Integration of social media plug-ins
6.1 Embedding YouTube videos
6.1.1 Description and scope of data processing
We have integrated YouTube videos into our online offer, which are stored on http://www.Youtube.de or http://www.YouTube.com and can be played directly from our website.
By visiting our website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data that (as shown above) is collected every time you visit our website for technical reasons is passed on to YouTube.
The data is passed on regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google (YouTube's parent company), your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out of YouTube before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
6.1.2 Purposes of data processing
Data processing, in particular data transmission to YouTube, is carried out for the purpose of simplifying the use of our media content and increasing the attractiveness of our website. By integrating YouTube films, we give you the opportunity to interact with the social network YouTube and other users of this network, so that we can improve our offer and make it more interesting for you as a user.
6.1.3 Consent to the transfer of personal data to a third country
Subject to legal or contractual permissions, personal data may only be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. The data transfer may be carried out if the European Commission has determined by means of a decision within the meaning of Art. 45 Para. 1, 3 DS-GVO that the third country in question offers an appropriate level of protection under data protection law. Through such so-called adequacy decisions, the European Commission certifies that third countries have data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data- protection/international-transfers/adequacy/index_en.html).
Insofar as data is transferred between the USA and the EU in exceptional cases, it should be pointed out that there is no such adequacy decision for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately guaranteed in the USA. This would generally be possible via binding company rules, European Commission standard contractual clauses for the protection of personal data, certificates or recognized codes of conduct.
Although Google has submitted to the corresponding standard contractual clauses of the European Commission, US companies are still obliged to hand over personal data to security authorities without you as the person concerned being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities. It may also be the case that you cannot assert or enforce your right to information vis-à-vis Google in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully comply with the requirements of the GDPR in terms of quantity and quality.
It is therefore possible that the standard contractual clauses of the European Commission used by Google do not provide sufficient guarantees within the meaning of Art. 46 Para. 2 lit. a) GDPR.
By agreeing to the data collection by Google, you expressly agree to the data transfer described here, although you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without suitable guarantees.
This consent can be revoked at any time. A revocation does not affect the legality of the processing carried out on the basis of the consent up to the revocation.
6.1.4 Legal basis of data processing
The legal basis is your explicit and voluntary consent according to Art. 6 para. 1 p. 1 lit. f a) GDPR in the processing of your personal data for presentation and advertising purposes.
6.1.5 Duration of storage, possibility of objection and removal on YouTube (companies of the Google/Alphabet group of companies)
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods. We also have no information on the deletion of the data collected by YouTube. YouTube may store the data collected about you as usage profiles and use them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right. Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options to protect your privacy:
6.1.6 Further information
Further information on the purpose and scope of data collection and its processing as well as further information on your rights in this regard and setting options for protecting your privacy can be obtained from: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA / Google Ireland Limited Gordon House, Barrow Street Dublin 4.
6.2 Integration of Instagram
6.2.1 Description and scope of data processing
Our website uses a social media plug-in from Instagram. You can recognize the plug-in and its provider by the marking on the box above its initials or the logo.
We use the so-called two-click solution. When you visit our site, no personal data is initially passed on to the provider of the plug-ins or third parties. Only when you click on the marked field and thereby activate it, does the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In this case, the information collected when you visit our website is transmitted to the third-party provider. Since the plug-in provider uses cookies to collect data, we recommend that you check the cookie settings in your browser's security settings and delete all cookies before you click on the provider button.
We would like to point out that, according to our information, the data is passed on to the plug-in provider regardless of whether you have an account with the plug-in provider and/or are logged in there. If you are logged in to the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and e.g. B. link the page, the plug-in provider also stores this information in your user account and, if necessary, shares it publicly with your contacts.
6.2.2 Purposes of data processing
The data is transmitted to the plug-in provider in order to simplify the use of the plug-in provider's websites. With the plug-ins we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
6.2.3 Consent to the transfer of personal data to a third country
Subject to legal or contractual permissions, personal data may only be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. The data transfer may be carried out if the European Commission has determined by means of a decision within the meaning of Art. 45 Para. 1, 3 DS-GVO that the third country in question offers an appropriate level of protection under data protection law. Through such so-called adequacy decisions, the European Commission certifies that third countries have data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data- protection/international-transfers/adequacy/index_en.html).
Insofar as data is transferred between the USA and the EU in exceptional cases, it should be pointed out that there is no such adequacy decision for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately guaranteed in the USA. This would generally be possible via binding company rules, European Commission standard contractual clauses for the protection of personal data, certificates or recognized codes of conduct.
Although Instagram has submitted to the corresponding standard contractual clauses of the European Commission, US companies are still obliged to release personal data to security authorities without you as the person concerned being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities. It may also be the case that you cannot assert or enforce your right to information vis-à-vis Instagram in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Instagram may not fully comply with the requirements of the GDPR in terms of quantity and quality.
It is therefore possible that the standard contractual clauses of the European Commission used by Instagram do not provide sufficient guarantees within the meaning of Art. 46 Para. 2 lit. a) GDPR.
By agreeing to the data collection by Instagram , you expressly agree to the data transfer described here, although you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without suitable guarantees.
This consent can be revoked at any time. A revocation does not affect the legality of the processing carried out on the basis of the consent up to the revocation.
6.2.4 Legal bases of data processing
The legal basis is your explicit and voluntary consent according to Art. 6 para. 1 p. 1 lit. f GDPR in the processing of your personal data for presentation and advertising purposes.
6.2.5 Duration of storage; Possibility of objection and elimination
The cookies we use are stored on your computer and transmitted to our site. Therefore, you have control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been saved at any time. If you deactivate the use of cookies for our website or delete cookies that have been set, you may no longer be able to use all the functions of the website to their full extent.
6.2.6 Purposes and legal bases of data processing, duration of storage, possibility of objection and removal at the plug-in provider
We have no influence on the data collected and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, and the storage periods. We also have no information on the deletion of the data collected by the plug-in provider. However, the plug-in provider may store the data collected about you as usage profiles and use them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise, you must contact the respective plug-in provider. Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declaration. There you will also receive further information on your rights in this regard and setting options to protect your privacy.
6.2.7 Further information
Further information on the purpose and scope of data collection and its processing as well as further information on your rights in this regard and setting options for protecting your privacy can be obtained from: Instagram LLC, 1601 Willow Rd , Menlo Park CA 94025, USA. More information about Instagram's social plug-ins is available at the following Internet address: https://help.instagram.com/.
7. Integration of marketing and statistics tools
7.1 Integration of Google Analytics
7.1.1 Description and scope of data processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4 (hereinafter: Google). Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website (see below), however, your IP address will be shortened beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser plug-in available under the following link. Download and install in: http://tools.google.com/dlpage/gaoptout?hl=de.
Google Analytics is used on this website with the extension “ _anonymizeIp ()”. As a result, IP addresses are further processed in abbreviated form and personal reference can thus be ruled out. If the data collected about you has a personal reference, this will be excluded immediately and the personal data will be deleted immediately.
7.1.2 Purpose of data processing
We use Google Analytics to analyze and regularly improve our website. We can use the statistics obtained to improve our offer and make it more interesting for you.
7.1.3 Consent to the transfer of personal data to a third country
Subject to legal or contractual permissions, personal data may only be processed in a third country if the special requirements of Art. 44 et seq. GDPR are met. The data transfer may be carried out if the European Commission has determined by means of a decision within the meaning of Art. 45 Para. 1, 3 GDPR that the third country in question offers an appropriate level of protection under data protection law. Through such so-called adequacy decisions, the European Commission certifies that third countries have data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data- protection/international-transfers/adequacy/index_en.html).
Insofar as data is transferred between the USA and the EU in exceptional cases, it should be pointed out that there is no such adequacy decision for the USA. Therefore, there would have to be other suitable guarantees that data protection is adequately guaranteed in the USA. This would generally be possible via binding company rules, European Commission standard contractual clauses for the protection of personal data, certificates or recognized codes of conduct.
Although Google has submitted to the corresponding standard contractual clauses of the European Commission, US companies are still obliged to hand over personal data to security authorities without you as the person concerned being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities. It may also be the case that you cannot assert or enforce your right to information vis-à-vis Google in the long term. Furthermore, the technical and organizational measures for the protection of personal data at Google may not fully comply with the requirements of the GDPR in terms of quantity and quality.
It is therefore possible that the standard contractual clauses of the European Commission used by Google do not provide sufficient guarantees within the meaning of Art. 46 Para. 2 lit. a) GDPR.
By agreeing to the data collection by Google Analytics, you expressly agree to the data transfer described here, although you have been informed above about the possible risks of such data transfers without the existence of an adequacy decision and without suitable guarantees.
This consent can be revoked at any time. A revocation does not affect the legality of the processing carried out on the basis of the consent up to the revocation.
7.1.4 Legal basis of data processing
The legal basis is your explicit and voluntary consent according to Art. 6 para. 1 S. 1 lit. a) GDPR in the processing of your personal data for the purposes of analysis and statistics on user behavior using Google Analytics.
7.1.5 Further information
Further information on the purpose and scope of the data collection and its processing as well as further information on your rights in this regard and setting options for the protection of your privacy can be obtained from: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland , Fax: + 353 (1) 436 1001. User conditions: http://google.com/analytics/terms/de.html , as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy .