Privacy Policy
Protecting your privacy is important to us. We process your personal data only in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and other statutory data protection regulations, in particular the German Federal Data Protection Act (BDSG) and the Swiss Federal Act on Data Protection (FADP). Which data protection law applies depends on each individual case. Therefore, to the extent that this privacy policy refers to the GDPR, it also incorporates the relevant provisions of otherwise applicable data protection law.
Of course, all data will be treated confidentially. With the following data protection information, we would like to explain to you in more detail how your data is handled when you use our websites.
1 GENERAL INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA
Basically, the collection, processing and use of personal data for the use of our website is limited to the necessary extent and the necessary data. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In addition, we use the widespread SSL (Secure Socket Layer) method on our website in conjunction with the highest level of encryption supported by your web browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.
DATA CONTROLLER
The data controller entity for the collection, processing and use of your personal data acc. Art. 4 para. 7 GDPR is:
Sea to Summit Switzerland GmbH
c/o Findea AG
Zweigniederlassung Basel
Steinenvorstadt 33
4051 Basel
Switzerland
Phone: +49 (0) 521 988 744 34
Email: info@seatosummit.eu
2 PURPOSES AND LEGAL BASES FOR THE PROCESSING OF YOUR PERSONAL DATA AS WELL AS FURTHER INFORMATION ON SPECIFIC DATA PROCESSING
2.1 GENERAL PROCESSING OF DATA FROM OUR BUSINESS PARTNERS
2.1.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
For the processing of business relationships with our business partners (customers, suppliers, other business partners), we also store your personal data (e.g. e-mail address, postal address, telephone number). The personal data that we collect for this purpose is used internally by the departments involved in handling the business relationship.
This data may be merged and stored with the data of other orders, inquiries and business correspondence that you send us by other means (fax, post, telephone).
2.1.2 PURPOSES OF DATA PROCESSING
We process your personal data for the purposes that are necessary for the fulfillment of the business relationship between you and us, such as for the following purposes:
- Preparation of offers to customers for deliveries and services
- Determination of your individual prices
- internal processing of your order
- Delivery of the ordered goods
- Inquiries to our suppliers
- contract negotiations
- Clarification of all technical aspects of the products and services from the business relationship
- payment transactions
- General business correspondence with you
2.1.3 LEGAL BASES OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis for the processing of your data is Art. 6 para. 1 S. 1 lit. a and f GDPR. The processing takes place either on the basis of any consent you may have given us or on the basis of our legitimate interests. Our legitimate interests follow from the purposes for data collection presented. If the processing is necessary for concluding or performing a contract between us and you, the legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR. To the extent the processing is necessary for the fulfilment of our legal obligations, inter alia, for the fulfilment of statutory retention obligations, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c GDPR.
2.1.4 DURATION OF STORAGE
We store your personal data for the duration of our business relationship or in accordance with the statutory retention periods.
2.2 VISITING OUR WEBSITES
2.2.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
Each time our website is accessed, our systems automatically record data and information from the computer system of the accessing computer (personal data that your browser transmits to our server). This also happens if you do not register or otherwise provide us with information, for example through active input. The following data is always collected when you visit our website:
- IP address of the user
- Date and time of the request or access
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access Status/HTTP Status Code
- amount of data transferred
- Website from which the request comes (from which the user's system reaches our website)
- Website accessed by the user's system through our website
- Information about the browser type and version used
- Operating system and its interface
- Browser software language and version
This data is stored in the log files of our system. Storage together with other of your personal data does not take place regularly.
2.2.2 PURPOSES OF DATA PROCESSING
The storage of the data mentioned, in particular the IP address by our systems, is only temporary for the duration of the session and is necessary to enable proper operation and proper display of the website. This processing of your data also serves the purpose of evaluating and continuing to guarantee system security and system stability as well as other administrative purposes.
If your data is stored in our log files, this also only happens to ensure the functionality of our website. In addition, we use the data to optimize and ensure the security of our information technology systems.
An evaluation of the data for marketing purposes does not take place in this context.
2.2.3 LEGAL BASES OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis for the processing and temporary storage of your personal data is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest is to achieve the stated processing purposes.
2.2.4 DURATION OF STORAGE
Your data will be deleted as soon as they are no longer required to achieve the purpose. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If your data is stored in log files, this is the case after seven days at the latest. Storage beyond this is only intended in exceptional cases, for example if this is necessary for technical reasons or to improve our systems. In this case, the IP addresses of the users are deleted or alienated so that an assignment is no longer possible.
2.3 CONTACT FORM, EMAIL CONTACT
2.3.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
A contact form is integrated on our website, which you can use to contact us. When using the contact form, the data entered in the input mask is transmitted to us and stored:
- Mandatory: email address
- Optional: name, phone number
In addition, your IP address and the date and time of the request are saved.
It is also possible to contact us via the e-mail addresses provided by us. In this case, your personal data transmitted by e-mail will be stored by us and processed further, in particular to process your inquiry or the reason for your contacting us.
2.3.2 LEGAL BASIS OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis for the processing of your data when using the contact form or contacting us via e-mail is our legitimate interest in responding to your query or your consent (if given to us) in accordance with Art. 6 Para. 1 Sentence 1 lit. a or lit. f GDPR.
If the e-mail contact is aimed at concluding a contract, the legal basis for the processing is Art. 6 Para. 1 S. 1 lit. b GDPR.
2.3.3 PURPOSES OF DATA PROCESSING
The processing of the personal data from the input mask or the e-mail sent to us only serves to process your contact with us. If you contact us by e-mail, this is to be seen as the necessary legitimate interest in the processing of the data by us. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.
2.3.4 DURATION OF STORAGE
We will delete your data as soon as we no longer need them to achieve the purposes presented. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with you has ended. The conversation is usually over when it can be inferred from the circumstances that the reason for your contacting us has been finally clarified.
Additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
2.4 CREATING A CUSTOMER ACCOUNT
2.4.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
You can register with a personal customer account on our website. We process the registration data to set up and manage your customer account. As a registered user, you have access to your personal customer account (by means of your e-mail address and the password you have chosen yourself), in which you can view the history of the use of our services and your personal settings, among other things. The following data is collected as part of the registration process:
- first name and last name
- password
- E-mail address
The following data is collected as part of the login process:
- E-mail address
- password
At the time of login, the following data is also stored:
- The IP address of the user
- Date and time of login
2.4.2 LEGAL BASIS OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis for the processing of your data when creating the customer account is our contractual relationship with you (Art. 6 para. 1 s. 1 lit. b GDPR) or our legitimate interest (Art. 6 para. 1 s. 1 lit. f GDPR).
2.4.3 PURPOSES OF DATA PROCESSING
The processing of personal data from the registration process only serves to set up your customer account (Art. 6 para. 1 s. 1 lit. b GDPR) and to fulfill our legitimate interest in preventing misuse of the customer account (Art. 6 para. 1 s. 1 lit. f GDPR).
2.4.4 DURATION OF STORAGE
We will delete your data as soon as we no longer need them to achieve the purposes presented.
For the personal data when creating the customer account, this is the case when the contract has been fully processed or your customer account has been deleted. Your data will be restricted for further processing and deleted after the tax and commercial retention periods have expired, unless you have expressly consented to further use of your data or we have the right to use the data beyond this under applicable law. The deletion of your customer account is possible at any time and can be done either by sending a message to the contact option described below or using a function provided for this purpose in the customer account.
Additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
2.5 ORDERS VIA OUR ONLINE (E-SHOP)
2.5.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
Registration in our e-shop for purchasing our products via our online sales is possible for both commercial customers and consumers. For this we also ask you for personal data (name, e-mail address, postal address, telephone number). However, we will still contact you directly to activate our e-shop functions. The personal data that you provide to us here will be used internally by the departments that deal with processing your inquiries and orders.
If necessary, your data will be merged and saved with the data of other orders that you send to us by other means of ordering (fax, post, telephone).
2.5.2 PURPOSES OF DATA PROCESSING
We process your personal data for the purposes that are necessary for the fulfillment of the business relationship between you and us.
We process your personal data, which you give us for the use of our e-shop offer, for the processing of your individual inquiries and orders, such as for the following purposes:
- Checking your access authorization
- Your use of the shopping cart
- Determination of your individual prices
- internal processing of your order
- Delivery of the ordered goods
- payment transactions
- marketing measures
2.5.3 LEGAL BASIS OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis for processing is the conclusion and fulfillment of the purchase contract for the ordered goods, Art. 6 Para. 1 lit. b and lit. f. GDPR.
2.5.4 DURATION OF STORAGE
This data will be deleted when it is no longer required for the execution of the contract (including customer service and warranty), unless we are legally obliged to store it, e.g. due to commercial or tax storage obligations or have legal rights to store it.
2.6 ELECTRONIC NEWSLETTER
2.6.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
When sending our electronic newsletter, for which you can register, we process the following personal data:
- Mandatory: email address
- Voluntary: first name, last name
In order to send the electronic newsletter, it is mandatory to provide the email address. The processing of your other data serves to personalize this contact as well as the specialization of the offers and information and is voluntary.
2.6.2 PURPOSES OF DATA PROCESSING
We process your e-mail address in order to contact you for the purpose of sending our electronic newsletter, to inform you about current events and, if applicable, current developments and to maintain our contractual relationship. In addition, we use this data for advertising communications by e-mail and, if we have received your e-mail address in connection with our products and services, for advertising measures for our own similar products and services.
To enhance the user experience and personalize communication with our customers, personal data will be accessible (not stored) from outside Europe. We will ensure that the accessor has provided adequate safeguards.
2.6.3 LEGAL BASES OF DATA PROCESSING
In order to send our newsletter to you, we obtain your consent. For this we use the so-called double opt -in procedure. After you have registered for the newsletter, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish the newsletter to be sent. If you do not confirm your registration within 48 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to prove your registration and to be able to clarify possible misuse of your personal data.
If we do not already process your data based on your explicit consent in exceptional cases, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and fundamental freedoms do not prevail (Art. 6 para. 1 S. 1 lit. f GDPR, or similar provisions of the applicable data protection law).
2.6.4 DURATION OF STORAGE
We delete your data as soon as we no longer need them to achieve the purposes presented. We will store your personal data for advertising and information purposes, i.e. sending information and offers about services, for a maximum period of one year from the last relevant contact with you. A relevant contact exists, for example, if there is verbal, telephone or mutual written communication between us.
You can withdraw your consent at any time and thus unsubscribe from receiving information about current and future products, services or other information about us. You can declare your revocation by clicking on the link provided in each newsletter e-mail, by sending an e-mail to info@seatosummit.eu sending a message to our contact details. If you object to the use of your data, we will no longer send you marketing communications.
2.7 GENERAL INFORMATION ON THE USE OF COOKIES
When you visit and use our website, cookies are stored on your computer. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic character string that enables the browser to be clearly identified when the website is called up again.
Some of them are essential, ie they are technically necessary for the operation of our website. Other cookies are used for statistical purposes or to analyze access to our website or for marketing purposes or to be able to offer you the use of external media. Both temporary/session cookies and cookies stored for longer (so-called permanent cookies) are used. Temporary cookies are deleted again as soon as you close your browser. Permanent cookies remain for a longer period of time, but can be deleted manually at any time. Some of the cookies are placed by third parties.
To the extent that a legal basis is required by the applicable data protection laws, the legal basis for data processing when using essential cookies is Art. 6 para. 1 S. 1 lit. f GDPR, when using all other cookies, the legal basis is your consent according to Art. 6 para. 1 S. 1 lit. a GDPR. If we do not process your data based on your explicit consent, your personal data will only be processed to the extent necessary to protect our legitimate interests or the legitimate interests of a third party, provided that your interests or fundamental rights and freedoms in the protection of your personal data do not prevail.
You can find detailed information about the use of the respective cookies, in particular about their processing purpose, the respective functional duration and to what extent they are placed by third parties or third parties have access to the data collected via the cookies, in addition to the information provided in our data protection declaration in our Cookie Policy. Depending on the category of cookies used, you will also find detailed information on the legal basis for the respective data processing here.
You can agree to the use of the respective categories of cookies individually. You can also change the consent you have given at any time under Cookie Policy or as well as by clicking on the fingerprint icon in the lower left corner of the browser or withdraw it from us.
2.8 EXTERNAL LINKS
If our website links to the websites of other providers or partners, our data protection declaration does not apply to their content. Further information about the data protection of the operators of these pages can be found on the respective websites.
2.9 DATA PROTECTION FOR APPLICATIONS AND IN THE APPLICATION PROCESS
We collect and process personal data from applicants for the purpose of handling the application process (legal basis is Art. 6 para. 1 sentence 1 lit. b or lit. f GDPR). Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents to us electronically, for example by email or via a web form on the website. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that no other legitimate interests on our part stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the German General Equal Treatment Act (AGG) or equivalent laws of other jurisdictions.
3 RECIPIENTS OF YOUR DATA
We disclose your data to the following categories of recipients:
- Our affiliates (to the extent necessary);
- IT service providers or other service providers who help us operate our business, as well as perform advertising and marketing service (e.g. service providers who help us store our customer data, host our website, protect our IT, as well as our shipping service providers who receive your name, address and billing address or marketing service providers);
- Payment service providers (for any purchases that you make, we share some of your personal data, including identifiers and financial information, with third party payment processors to process your requested transaction)
- Consultants and other persons who are bound by professional secrecy or confidentiality (e.g. lawyers, insurers, bankers, tax consultants and auditors);
- Government agencies/authorities or other government bodies (to the extent disclosure is necessary to fulfill a legal obligation; or if such disclosure is necessary to investigate, prevent, or take other action regarding actual or suspected illegal or fraudulent activities or potential threats to the physical safety or well-being of any individual);
- Recipients in the course of any reorganizations, mergers, divestitures or other transfers of assets (as we grow and develop our business, it is possible that our corporate structure or organization might change or that we might merge or otherwise combine with, or that we or portions of our business might be acquired by, another company; in any such transactions, personal information generally is one of the transferred business assets);
- Other recipients in connection with our use of cookies and other technologies (please refer to the relevant cookies section in this privacy notice and the cookie banner on our Website for this information).
To the extent that the aforementioned recipients are data processors (i.e., they process your data only on our behalf for the purposes we instruct), they are subject to contractual obligations to process your data only in accordance with our written instructions and they must take measures to protect the confidentiality and security of your data.
We may transfer your personal data to external service providers who carry out a credit check in order to safeguard our legitimate interest in securing our claims (subject to your consent where necessary). We receive information from these credit agencies about your previous payment history and credit ratings. This data enables us to evaluate our business relationship and is used by us to decide on a delivery and to protect us against payment defaults.
4 TRANSFER OF YOUR DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION
Due to the international nature of our business, it can be necessary for us to transfer your personal data to our affiliates or to other recipients outside the European Union (EU) and/or the European Economic Area (EEA), e.g the USA, Australia, UK or Switzerland (“Third Countries”) or to recipients in other countries worldwide.
We can carry out the transfer to Third Countries if the European Commission and/or the Swiss Federal Council have determined by means of a decision that the Third Country in question offers an appropriate level of data protection. Through such so-called adequacy decisions, or, in the case of data transfers from Switzerland, by being listed in Annex 1 of the Swiss Data Protection Ordinance, the European Commission or the Swiss Federal Council certify that third countries have data protection that is comparable to the recognized standard in the European Economic Area (a list of these countries and a copy of the adequacy decisions can be found here: http://ec.europa.eu/justice/data- protection/international-transfers/adequacy/index_en.html) or Switzerland respectively (for Annex 1 of the Swiss Data Protection Ordinance see here: https://www.fedlex.admin.ch/eli/oc/2022/568/de#annex_1). Insofar as data is transferred to the USA, please note that there is an adequacy decision for commercial organisations participating in the so-called EU-US Data Privacy Framework.
To the extent that we transfer your data from the EU/EEA or Switzerland to recipients in third countries that are not covered by an adequacy decision of the EU Commission and/or that are not listed in Annex 1 of the Swiss Data Protection Ordinance, including to companies in the USA not participating in the EU US Data Privacy Framework or similar Frameworks, we achieve an adequate level of data protection by concluding standard contractual clauses (including, where necessary, the amendments required by the Swiss Federal Data Protection and Information Commissioner) or by means of binding internal company rules of our business partners and, if necessary, supplement these transfer mechanisms with further contractual, technical and organizational measures. Where we have obtained your consent, your consent may justify a transfer to Third Countries as well. You can revoke such consent at any time with effect for the future.
Some Third Countries have different laws and data protection compliance requirements than the country in which you are located. The Third Countries concerned may not have the level of data protection that you enjoy under the GDPR and/or the Swiss FADP. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have very limited legal remedies against this. Please reach out to the contact details herein to find out more about copies of available transfer mechanisms.
5 AUTOMATED DECISION MAKING
Automated decision-making does not take place.
6 INTEGRATION OF SOCIAL MEDIA PLUG-INS
6.1 EMBEDDING YOUTUBE VIDEOS
6.1.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
We have integrated YouTube videos into our online offer, which are stored on http://www.Youtube.de or http://www.YouTube.com and can be played directly from our website.
By visiting our website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data that (as shown above) is collected every time you visit our website for technical reasons is passed on to YouTube.
The data is passed on regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google (YouTube's parent company), your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out of YouTube before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.
6.1.2 PURPOSES OF DATA PROCESSING
Data processing, in particular data transmission to YouTube, is carried out for the purpose of simplifying the use of our media content and increasing the attractiveness of our website. By integrating YouTube films, we give you the opportunity to interact with the social network YouTube and other users of this network, so that we can improve our offer and make it more interesting for you as a user.
6.1.3 LEGAL BASIS OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis is your explicit and voluntary consent.
6.1.4 POSSIBILITY OF OBJECTION AND REMOVAL ON YOUTUBE (COMPANIES OF THE GOOGLE/ALPHABET GROUP OF COMPANIES)
YouTube may store the data collected about you as usage profiles and use them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact YouTube to exercise this right. Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the provider's data protection declaration. There you will also find further information on your rights in this regard and setting options to protect your privacy.
6.1.5 FURTHER INFORMATION
Further information on the purpose and scope of data collection and its processing as well as further information on your rights in this regard and setting options for protecting your privacy can be obtained from: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA / Google Ireland Limited Gordon House, Barrow Street Dublin 4.
6.2 INTEGRATION OF INSTAGRAM
6.2.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
Our website uses a social media plug-in from Instagram. You can recognize the plug-in and its provider by the marking on the box above its initials or the logo.
We use the so-called two-click solution. When you visit our site, no personal data is initially passed on to the provider of the plug-ins or third parties. Only when you click on the marked field and thereby activate it, does the plug-in provider receive the information that you have accessed the corresponding website of our online offer. In this case, the information collected when you visit our website is transmitted to the third-party provider. Since the plug-in provider uses cookies to collect data, we recommend that you check the cookie settings in your browser's security settings and delete all cookies before you click on the provider button.
We would like to point out that, according to our information, the data is passed on to the plug-in provider regardless of whether you have an account with the plug-in provider and/or are logged in there. If you are logged in to the plug-in provider, your data collected from us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and e.g. link the page, the plug-in provider also stores this information in your user account and, if necessary, shares it publicly with your contacts.
6.2.2 PURPOSES OF DATA PROCESSING
The data is transmitted to the plug-in provider in order to simplify the use of the plug-in provider's websites. With the plug-ins we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user.
6.2.3 LEGAL BASES OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis is your explicit and voluntary consent according to Art. 6 para. 1 p. 1 lit. f GDPR in the processing of your personal data for presentation and advertising purposes.
6.2.4 DURATION OF STORAGE; POSSIBILITY OF OBJECTION AND ELIMINATION
The cookies we use are stored on your computer and transmitted to our site. Therefore, you have control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. You can delete cookies that have already been saved at any time. If you deactivate the use of cookies for our website or delete cookies that have been set, you may no longer be able to use all the functions of the website to their full extent.
6.2.5 PURPOSES AND LEGAL BASES OF DATA PROCESSING, DURATION OF STORAGE, POSSIBILITY OF OBJECTION AND REMOVAL AT THE PLUG-IN PROVIDER
The plug-in provider may store the data collected about you as usage profiles and use them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise, you must contact the respective plug-in provider. Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's data protection declaration. There you will also receive further information on your rights in this regard and setting options to protect your privacy.
6.2.6 FURTHER INFORMATION
Further information on the purpose and scope of data collection and its processing as well as further information on your rights in this regard and setting options for protecting your privacy can be obtained from: Instagram LLC, 1601 Willow Rd , Menlo Park CA 94025, USA. More information about Instagram's social plug-ins is available at the following Internet address: https://help.instagram.com/.
7 INTEGRATION OF MARKETING AND STATISTICS TOOLS
7.1 INTEGRATION OF GOOGLE ANALYTICS
7.1.1 DESCRIPTION AND SCOPE OF DATA PROCESSING
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited Gordon House, Barrow Street Dublin 4 (hereinafter: Google). Google Analytics uses cookies, which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website (see below), however, your IP address will be shortened beforehand by Google within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and then shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you will if applicable not be able to use all functions of this website in full. You can also prevent the data generated by the cookie and related to your use of the website (including your IP address) being sent to Google and the processing of this data by Google by using the browser plug-in available under the following link. Download and install in: http://tools.google.com/dlpage/gaoptout?hl=de.
Google Analytics is used on this website with the extension “ _anonymizeIp ()”. As a result, IP addresses are further processed in abbreviated form and personal reference can thus be ruled out. If the data collected about you has a personal reference, this will be excluded immediately and the personal data will be deleted immediately.
7.1.2 PURPOSE OF DATA PROCESSING
We use Google Analytics to analyze and regularly improve our website. We can use the statistics obtained to improve our offer and make it more interesting for you.
7.1.3 LEGAL BASIS OF DATA PROCESSING
To the extent that a legal basis is required by the applicable data protection laws, the legal basis is your explicit and voluntary consent according to Art. 6 para. 1 S. 1 lit. a) GDPR in the processing of your personal data for the purposes of analysis and statistics on user behavior using Google Analytics.
7.1.4 FURTHER INFORMATION
Further information on the purpose and scope of the data collection and its processing as well as further information on your rights in this regard and setting options for the protection of your privacy can be obtained from: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: + 353 (1) 436 1001. User conditions: http://google.com/analytics/terms/de.html , as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy .
8 YOUR DATA SUBJECT RIGHTS
You have statutory rights to Access, Correct, Delete, Restrict, Transfer, Object, and Withdraw Consent with respect to your personal data. We describe these rights in more detail below. You are entitled to
- request access to your personal data and copies of the personal data we hold about you.
- request correction of the personal data that we hold about you in order to have any incomplete or inaccurate information corrected, though we may need to verify the accuracy of the new information you provide to us.
- request deletion of your personal data in order to ask us to delete or remove personal data where there is not a statutory reason for us to continuing to process it. Note that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request. For example, where we have a legal obligation to retain and store your personal data.
- request restriction of processing of your personal data in order to ask us to suspend the processing of your personal data.
- request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to personal data which you initially provided consent for us to use or where we used the personal data to perform a contract with or provide services to you.
-
-
object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms. You can, in particular, control the extent to which we market to you and you have the right to request that we stop sending you marketing messages at any time.
-
object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms. You can, in particular, control the extent to which we market to you and you have the right to request that we stop sending you marketing messages at any time.
- withdraw your consent at any time where we are relying on consent to process your personal data. In particular, you can opt out of receiving promotional emails from us by following the instructions in those emails. The withdrawal of your consent will not affect the lawfulness of any processing carried out before you withdraw your consent.
Right of complaint: You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, workplace or the place of the alleged infringement, if you believe that our processing of your personal data violates the GDPR or other data protection provisions or with the Swiss Federal Data Protection and Information Commissioner within the scope of the Swiss FADP. This right of appeal is without prejudice to any other administrative or judicial remedy.
9 ARE YOU OBLIGED TO PROVIDE YOUR DATA?
In principle, you are not obliged to provide us with your data. However, if you do not do this, you may not be able to place an order on our website. In addition, we may not be able to respond to your inquiries. If the processing of your data is necessary for the performance of a contract between you and us, and you do not provide the required information, we may not be able to fulfill our contractual obligations to you.
10 QUESTIONS, COMPLAINTS, EXERCISING YOUR DATA PROTECTION RIGHTS
If you have any questions or complaints about the collection, use or retention of your personal data, or if you wish to exercise any of your rights in relation to your personal data, you can contact us by emailing us at the e-mail address provided herein.