IMPORTANT!
Please understand that I can NOT and do NOT want to offer individual support, advice or assistance with errors and problems by e-mail or even telephone (not even for a fee!).
Please post your questions as a comment in a suitable post, because then other readers may also be able to help and benefit from them.
Corresponding enquiries by e-mail will NOT be answered.
Specific questions about software and hardware will be answered by the manufacturer and this should also be the first point of contact.
Advertising enquiries & cooperations
If you are interested in a co-operation and advertising booking, please contact blog AT markus-dollinger.de. I will be happy to tell you about the possibilities and conditions.
Offers for link exchanges, guest posts, paid product reviews and offers from the areas of gambling, online betting etc. will be ignored. The same applies to requests to omit advertising labelling or do-follow links (which are nonsense anyway).
Provider identification according to § 6 TDG:
Markus Dollinger
Eschenweg 19
95126 Schwarzenbach/S.
E-mail: [email protected]
V.i.S.d.P. Responsible according to § 10 paragraph 3 MDStV:
Markus Dollinger
Eschenweg 19
95126 Schwarzenbach/S.
E-Mail: [email protected]
Legal information
We constantly check and update the information on our website. Despite all due care, the data may have changed in the meantime. No liability or guarantee can therefore be assumed for the topicality, correctness and completeness of the information provided. The same applies to all other websites referred to via hyperlinks. Nachbelichtet is not responsible for the content of websites accessed via such links. Nachbelichtet also reserves the right to make changes or additions to the information provided. The content and structure of the websites are protected by copyright. The commercial reproduction of information or data, in particular the commercial use of texts, parts of texts or images, requires prior authorisation.
Privacy policy
Introduction
With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to as “data”) that we process, for what purposes and to what extent. The privacy policy applies to all processing of personal data carried out by us, both in the context of the provision of our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as “online offer”).
The terms used are not gender-specific.
Status: 10 January 2020
Table of contents
- Introduction
- Controller
- Overview of the processing operations
- Relevant legal bases
- Security measures
- Transmission and disclosure of personal data
- Use of cookies
- Use of online marketplaces for e-commerce
- Blogs and publication media
- Provision of the online offer and web hosting
- Newsletter and broad communication
- Online marketing
- Affiliate programmes and affiliate links
- Presence in social networks
- Plugins and embedded functions and content
- Deletion of data
- Changing and updating the privacy policy
- Rights of the data subjects
Person responsible
Markus Dollinger
Eschenweg 19
95126 Schwarzenbach/S.
E-mail address: [email protected]
Overview of the processing operations
The following overview summarises the types of data processed and the purposes of their processing and refers to the data subjects.
Types of data processed
Inventory data (e.g. names, addresses).
Content data (e.g. text entries, photographs, videos).
Contact data (e.g. e-mail, telephone numbers).
Meta/communication data (e.g. device information, IP addresses).
Usage data (e.g. websites visited, interest in content, access times).
Location data (data indicating the location of an end user’s device).
Contract data (e.g. subject matter of the contract, term, customer category).
Payment data (e.g. bank details, invoices, payment history).
Categories of data subjects
Interested parties.
Communication partners.
Customers.
Users (e.g. website visitors, users of online services).
Purposes of the processing
Affiliate tracking.
Provision of our online services and user-friendliness.
Visit action evaluation.
Cross-device tracking (cross-device processing of user data for marketing purposes).
Direct marketing (e.g. by email or post).
Feedback (e.g. collecting feedback via an online form).
Interest-based and behavioural marketing.
Contact enquiries and communication.
Conversion measurement (measuring the effectiveness of marketing measures).
Profiling (creation of user profiles).
Remarketing.
Reach measurement (e.g. access statistics, recognising returning visitors).
Security measures.
Tracking (e.g. interest/behavioural profiling, use of cookies).
Contractual services and service.
Managing and responding to enquiries.
Target group formation (determination of target groups relevant for marketing purposes or other output of content).
Relevant legal bases
In the following, we inform you of the legal basis of the General Data Protection Regulation (GDPR), on the basis of which we process personal data. Please note that in addition to the provisions of the GDPR, the national data protection regulations in your or our country of residence and domicile may apply.
Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – The data subject has given their consent to the processing of their personal data for a specific purpose or several specific purposes.
Contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Protection of vital interests (Art. 6 para. 1 sentence 1 lit. d. GDPR) – Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
National data protection regulations in Germany: In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Germany. These include, in particular, the Act on the Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special regulations on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. It also regulates data processing for the purposes of the employment relationship (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. The data protection laws of the individual federal states may also apply.
Security measures
We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as access, input, disclosure, safeguarding availability and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and procedures in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
Shortening of the IP address: If it is possible for us or if it is not necessary to store the IP address, we shorten or have your IP address shortened. In the case of IP address truncation, also known as “IP masking”, the last octet, i.e. the last two digits of an IP address, are deleted (in this context, the IP address is an identifier individually assigned to an Internet connection by the online access provider). The purpose of shortening the IP address is to prevent or make it much more difficult to identify a person by their IP address.
SSL encryption (https): We use SSL encryption to protect your data transmitted via our online offering. You can recognise such encrypted connections by the prefix https:// in the address bar of your browser.
Transmission and disclosure of personal data
As part of our processing of personal data, the data may be transferred to other bodies, companies, legally independent organisational units or persons or disclosed to them. The recipients of this data may include, for example, payment institutions in the context of payment transactions, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and in particular conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.
Use of cookies
Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after their visit to an online service. The information stored may include, for example, the language settings on a website, the login status, a shopping basket or the location where a video was watched. The term “cookies” also includes other technologies that fulfil the same functions as cookies (e.g. when user information is stored using pseudonymous online identifiers, also known as “user IDs”)
A distinction is made between the following cookie types and functions
- Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed their browser.
- Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved or favourite content can be displayed directly when the user visits a website again. The interests of users that are used for reach measurement or marketing purposes can also be stored in such a cookie.
- First-party cookies: First-party cookies are set by us.
- Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
- Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g. to save logins or other user input or for security reasons).
- Statistical, marketing and personalisation cookies: Cookies are also generally used to measure reach and when a user’s interests or behaviour (e.g. viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to display content to users that corresponds to their potential interests. This process is also referred to as “tracking”, i.e. tracing the potential interests of users. . If we use cookies or “tracking” technologies, we will inform you separately in our privacy policy or when obtaining consent.
Information on legal bases: The legal basis on which we process your personal data with the help of cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the consent you have given. Otherwise, the data processed using cookies will be processed on the basis of our legitimate interests (e.g. in the business operation of our online offering and its improvement) or, if the use of cookies is necessary to fulfil our contractual obligations.
General information on cancellation and objection (opt-out): Depending on whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent you have given or to object to the processing of your data by cookie technologies (collectively referred to as “opt-out”). You can initially declare your objection using your browser settings, e.g. by deactivating the use of cookies (although this may also restrict the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be declared using a variety of services, especially in the case of tracking, via the websites http://optout.aboutads.info and http://www.youronlinechoices.com/. You can also obtain further information on how to object in the context of the information on the service providers and cookies used.
Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors, users of online services).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Use of online marketplaces for e-commerce
We offer our services on online platforms operated by other service providers. In this context, the data protection notices of the respective platforms apply in addition to our data protection notices. This applies in particular with regard to the procedures used on the platforms to measure reach and for interest-based marketing.
Processed data types: Inventory data (e.g. names, addresses), Payment data (e.g. bank details, invoices, payment history), Contact data (e.g. email, telephone numbers), Contract data (e.g. subject matter of contract, duration, customer category), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
Data subjects: Customers.
Purposes of processing: Contractual performance and service.
Legal bases: Contract fulfilment and pre-contractual enquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services used and service providers:
Amazon: Online marketplace for e-commerce; Service provider: Amazon Europe Core S.Ã .r.l., Amazon EU S.Ã .r.l., Amazon Services Europe S.Ã .r.l. and Amazon Media EU S.Ã .r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (together “Amazon Europe”), parent company: Amazon.com, Inc, 2021 Seventh Ave, Seattle, Washington 98121, USA; Website: https://www.amazon.de/; Privacy Policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active.
eBay: Online marketplace for e-commerce; Service provider: eBay Marketplaces GmbH, Helvetiastrasse 15/17, 3005 Bern, Switzerland; Website: https://www.ebay.de/; Privacy Policy: https://www.ebay.de/help/policies/member-behavior-policies/datenschutzerklrung?id=4260.
Blogs and publication media
We use blogs or comparable means of online communication and publication (hereinafter “publication medium”). Readers’ data will only be processed for the purposes of the publication medium to the extent necessary for its presentation and communication between authors and readers or for security reasons. In addition, we refer to the information on the processing of visitors to our publication medium in the context of this data protection notice.
Comments and contributions: If users leave comments or other contributions, their IP addresses may be stored on the basis of our legitimate interests. This is done for our security in the event that someone leaves illegal content in comments and posts (insults, prohibited political propaganda, etc.). In this case, we ourselves may be prosecuted for the comment or post and are therefore interested in the identity of the author.
Furthermore, we reserve the right to process user data for the purpose of spam detection on the basis of our legitimate interests.
On the same legal basis, we reserve the right to store users’ IP addresses for the duration of surveys and to use cookies in order to avoid multiple votes.
The personal information provided as part of the comments and contributions, any contact and website information as well as the content information will be stored permanently by us until the user objects.
Comment subscriptions: Users can subscribe to the follow-up comments with their consent. Users will receive a confirmation email to verify that they are the owner of the email address entered. Users can unsubscribe from ongoing comment subscriptions at any time. The confirmation email will contain information on the cancellation options. For the purposes of proving the user’s consent, we store the time of registration together with the user’s IP address and delete this information when users unsubscribe from the subscription.
You can cancel your subscription at any time, i.e. revoke your consent. We may store the unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time.
Profile pictures from Gravatar: We use the Gravatar service within our online offering and in particular in the blog.
Gravatar is a service where users can register and store profile pictures and their email addresses. If users leave posts or comments on other online presences (especially in blogs) with the respective e-mail address, their profile pictures can be displayed next to the posts or comments. For this purpose, the email address provided by users is transmitted to Gravatar in encrypted form for the purpose of checking whether a profile is stored for it. This is the sole purpose of transmitting the email address. It will not be used for any other purpose and will be deleted afterwards.
Gravatar is used on the basis of our legitimate interests, as we use Gravatar to offer post and comment authors the opportunity to personalise their posts with a profile picture.
By displaying the images, Gravatar learns the IP address of the user, as this is necessary for communication between a browser and an online service.
If users do not want a user picture linked to their email address at Gravatar to appear in the comments, they should use an email address that is not stored at Gravatar to comment. We would also like to point out that it is also possible to use an anonymous e-mail address or no e-mail address at all if users do not wish their own e-mail address to be sent to Gravatar. Users can completely prevent the transfer of data by not using our comment system.
Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of Processing: Contractual services and support, Feedback (e.g. collecting feedback via online form), Security measures, Managing and responding to enquiries, Contact requests and communication, Provision of our online services and usability.
Legal bases: Contract fulfilment and pre-contractual enquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR), Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), Protection of vital interests (Art. 6 Para. 1 S. 1 lit. d. GDPR).
Services used and service providers:
Wordfence: Firewall and security and error detection functions; Service provider: Defiant, Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA; Website: https://www.wordfence.com; Privacy Policy: https://www.wordfence.com/privacy-policy/; Standard Contractual Clauses (Safeguarding the level of data protection when processing data in third countries): https://www.wordfence.com/gdpr/dpa.pdf.
Provision of the online service and web hosting
In order to provide our online offering securely and efficiently, we use the services of one or more web hosting providers from whose servers (or servers managed by them) the online offering can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services.
The data processed as part of the provision of the hosting service may include all information relating to the users of our online service that is generated during use and communication. This regularly includes the IP address, which is necessary in order to be able to deliver the content of online offers to browsers, and all entries made within our online offer or from websites.
Processed data types: Content data (e.g. text input, photographs, videos), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors, users of online services).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Newsletter and broad communication
We only send newsletters, emails and other electronic notifications (hereinafter “newsletter”) with the consent of the recipient or with legal authorisation. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the user’s consent. Otherwise, our newsletters contain information about our services and us.
To subscribe to our newsletters, it is generally sufficient to provide your e-mail address. However, we may ask you to provide a name so that we can address you personally in the newsletter, or other information if this is necessary for the purposes of the newsletter.
Double opt-in procedure: Registration for our newsletter is always carried out in a so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people’s e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the mailing service provider are also logged.
Deletion and restriction of processing: We may store the unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for erasure is possible at any time, provided that the former existence of consent is confirmed at the same time. In the event of obligations to permanently observe objections, we reserve the right to store the e-mail address in a blacklist solely for this purpose.
The registration process is logged on the basis of our legitimate interests for the purpose of proving that it has been carried out properly. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure dispatch system.
Notes on legal bases: The newsletter is sent on the basis of the consent of the recipient or, if consent is not required, on the basis of our legitimate interests in direct marketing, if and insofar as this is permitted by law, e.g. in the case of advertising to existing customers. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests. The registration process is recorded on the basis of our legitimate interests in order to prove that it has been carried out in accordance with the law.
Contents: Information about us, our services, promotions and offers.
Performance measurement: The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a dispatch service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, is initially collected.
This information is used for the technical improvement of our newsletter based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined with the help of the IP address) or the access times. This analysis also includes determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our endeavour nor, if used, that of the mailing service provider to observe individual users. Rather, we use the analyses to recognise the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
The evaluation of the newsletter and the measurement of success are carried out, subject to the express consent of the users, on the basis of our legitimate interests for the purposes of using a user-friendly and secure newsletter system that serves both our business interests and meets the expectations of the users.
A separate cancellation of the performance measurement is unfortunately not possible, in which case the entire newsletter subscription must be cancelled or objected to.
Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. email, telephone numbers), Meta/communication data (e.g. device information, IP addresses), Usage data (e.g. websites visited, interest in content, access times).
Data subjects: Communication partners.
Purposes of processing: Direct marketing (e.g. by email or post).
Legal bases: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Possibility of objection (opt-out): You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to further receipt. You will find a link to unsubscribe from the newsletter either at the end of each newsletter or you can use one of the contact options listed above, preferably email.
Online marketing
We process personal data for online marketing purposes, which may include in particular the marketing of advertising space or the presentation of advertising and other content (collectively referred to as “content”) based on the potential interests of users and the measurement of their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (so-called “cookie”) or similar procedures are used, by means of which the user data relevant for the presentation of the aforementioned content is stored. This information may include, for example, content viewed, websites visited, online networks used, but also communication partners and technical information such as the browser used, the computer system used and information on usage times. If users have consented to the collection of their location data, this can also be processed.
The IP addresses of users are also stored. However, we use available IP masking procedures (i.e. pseudonymisation by shortening the IP address) to protect users. In general, no clear user data (such as e-mail addresses or names) is stored as part of the online marketing process, but pseudonyms. This means that neither we nor the providers of the online marketing procedures know the actual identity of the users, but only the information stored in their profiles.
The information in the profiles is usually stored in cookies or by means of similar procedures. These cookies can generally also be read later on other websites that use the same online marketing process, analysed for the purpose of displaying content and supplemented with further data and stored on the server of the online marketing process provider.
In exceptional cases, clear data can be assigned to the profiles. This is the case, for example, if the users are members of a social network whose online marketing process we use and the network links the user profiles to the aforementioned data. Please note that users can make additional agreements with the providers, e.g. by giving their consent during registration.
In principle, we only receive access to summarised information about the success of our advertisements. However, as part of so-called conversion measurements, we can check which of our online marketing processes have led to a so-called conversion, i.e., for example, to the conclusion of a contract with us. The conversion measurement is used solely to analyse the success of our marketing measures.
Unless otherwise stated, we ask you to assume that cookies used are stored for a period of two years.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.
Facebook pixel: With the help of the Facebook pixel, it is possible for Facebook to determine the visitors to our online offering as a target group for the display of adverts (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those users on Facebook and within the services of the partners cooperating with Facebook (so-called “Audience Network” https://www.facebook.com/audiencenetwork/ ) who have also shown an interest in our online offer or who have certain characteristics (e.g. interest in certain topics or products that can be seen from the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of the Facebook pixel, we can also track the effectiveness of Facebook adverts for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook advert (so-called “conversion measurement”).
Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), location data (data indicating the location of an end user’s end device).
Data subjects: Users (e.g. website visitors, users of online services), interested parties.
Purposes of Processing: Tracking (e.g. profiling based on interests and behaviour, use of cookies), Remarketing, Conversion Tracking, Interest-based and behavioral marketing, Profiling (Creating user profiles), Conversion tracking (Measurement of the effectiveness of marketing activities), Web Analytics (e.g. access statistics, recognition of returning visitors), Custom Audiences (Selection of relevant target groups for marketing purposes or other output of content), Cross-Device Tracking (Device-independent processing of user data for marketing purposes).
Security measures: IP masking (pseudonymisation of the IP address).
Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a GDPR), Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Possibility of objection (opt-out): We refer to the data protection notices of the respective providers and the objection options specified for the providers (so-called “opt-out”). If no explicit opt-out option has been specified, you have the option of switching off cookies in your browser settings. However, this may restrict the functions of our online offering. We therefore recommend the following additional opt-out options, which are summarised for the respective areas: a) Europe: https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Cross-territory: http://optout.aboutads.info.
Services used and service providers:
Google Analytics: Online marketing and web analytics; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://marketingplatform.google.com/intl/de/about/analytics/; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Opt-Out: Opt-out plugin: http://tools.google.com/dlpage/gaoptout?hl=de; Settings for the display of adverts: https://adssettings.google.com/authenticated.
Affiliate programmes and affiliate links
We include so-called affiliate links or other references (which may include discount codes, for example) to the offers and services of third-party providers (collectively referred to as “affiliate links”) in our online offering. If users follow the affiliate links or subsequently take advantage of the offers, we may receive a commission or other benefits from these third-party providers (collectively referred to as “commission”).
In order to be able to track whether the users have taken up the offers of an affiliate link used by us, it is necessary for the respective third-party providers to know that the users have followed an affiliate link used within our online offer. The assignment of the affiliate links to the respective business transactions or other actions (e.g. purchases) serves the sole purpose of commission settlement and is cancelled as soon as it is no longer required for this purpose.
For the purposes of the aforementioned assignment of affiliate links, the affiliate links can be supplemented by certain values that are part of the link or can be stored elsewhere, e.g. in a cookie. The values may include, in particular, the source website (referrer), the time, an online identifier of the operator of the website on which the affiliate link was located, an online identifier of the respective offer, the type of link used, the type of offer and an online identifier of the user.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Furthermore, their use may be part of our (pre-)contractual services, provided that the use of third-party providers has been agreed in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.
Processed data types: Contract data (e.g. subject matter of the contract, duration, customer category), usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), inventory data (e.g. names, addresses), payment data (e.g. bank details, invoices, payment history).
Data subjects: Users (e.g. website visitors, users of online services), customers.
Purposes of processing: Affiliate tracking, contractual performance and service.
Legal bases: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), Contract fulfilment and pre-contractual enquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).
Services and service providers used:
Amazon Affiliate Programme: Amazon – Affiliate Programme – Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its affiliates. Service provider: Amazon Europe Core S.Ã .r.l., Amazon EU S.Ã .r.l., Amazon Services Europe S.Ã .r.l. and Amazon Media EU S.Ã .r.l., all four located at 38, avenue John F. Kennedy, L-1855 Luxembourg, and Amazon Instant Video Germany GmbH, Domagkstr. 28, 80807 Munich (together “Amazon Europe”), parent company: Amazon.com, Inc, 2021 Seventh Ave, Seattle, Washington 98121, USA; Website: https://www.amazon.de; Privacy Policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active.
eBay Partner Network: Service provider: eBay Partner Network, Inc, 2145 Hamilton Ave, San Jose, CA 95125, USA; Website: https://partnernetwork.ebay.de; Privacy Policy: https://partnernetwork.ebay.de/legal#privacy-policy.
Presence in social networks
We maintain online presences within social networks in order to communicate with the users active there or to offer information about us there.
We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users’ rights. With regard to US providers that are certified under the Privacy Shield or offer comparable guarantees of a secure level of data protection, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.
Furthermore, user data is generally processed within social networks for market research and advertising purposes. For example, user profiles can be created based on user behaviour and the resulting interests of users. The user profiles can in turn be used, for example, to place adverts within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are generally stored on the user’s computer, in which the user’s usage behaviour and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).
For a detailed description of the respective forms of processing and the opt-out options, please refer to the data protection declarations and information provided by the operators of the respective networks.
In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. If you still need help, you can contact us.
Processed data types: Inventory data (e.g. names, addresses), Contact data (e.g. e-mail, telephone numbers), Content data (e.g. text input, photographs, videos), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses, etc.)
Data subjects: Users (e.g. website visitors, users of online services).
Purposes of Processing: Contact requests and communication, Tracking (e.g. profiling based on interests and behaviour, use of cookies), Remarketing, Web Analytics (e.g. access statistics, recognition of returning visitors).
Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR).
Services used and service providers:
Instagram : Social network; Service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy Policy: http://instagram.com/about/legal/privacy.
Facebook: Social network; Service provider: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active; Opt-Out: Settings for adverts: https://www.facebook.com/settings?tab=ads; Additional information on data protection: Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum, Data protection information for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
Pinterest: Social network; Service provider: Pinterest Inc, 635 High Street, Palo Alto, CA, 94301, USA; Website: https://www.pinterest.com; Privacy Policy: https://about.pinterest.com/de/privacy-policy; Opt-Out: https://about.pinterest.com/de/privacy-policy.
Twitter: Social network; Service provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy Policy: https://twitter.com/de/privacy,(Settings) https://twitter.com/personalization; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active.
YouTube: Social network; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Opt-Out: https://adssettings.google.com/authenticated.
Plugins and embedded functions and content
We incorporate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may be, for example, graphics, videos or social media buttons and contributions (hereinafter uniformly referred to as “content”).
The integration always requires that the third-party providers of this content process the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content or function. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags can be used to analyse information such as visitor traffic on the pages of this website. The pseudonymised information may also be stored in cookies on the user’s device and may contain technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offering, as well as being linked to such information from other sources.
Notes on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for the processing of data is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.
Processed data types: Usage data (e.g. websites visited, interest in content, access times), meta/communication data (e.g. device information, IP addresses), contact data (e.g. email, telephone numbers), content data (e.g. text input, photographs, videos), inventory data (e.g. names, addresses).
Data subjects: Users (e.g. website visitors, users of online services), communication partners.
Purposes of Processing: Provision of our online services and usability, Contractual services and support, Contact requests and communication, Direct marketing (e.g. by e-mail or postal), Targeting (e.g. profiling based on interests and behaviour, use of cookies), Interest-based and behavioral marketing, Profiling (Creating user profiles), Feedback (e.g. collecting feedback via online form), Security measures, Managing and responding to enquiries.
Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f. GDPR), consent (Art. 6 para. 1 sentence 1 lit. a GDPR), contract fulfilment and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b. GDPR).
Services used and service providers:
Instagram plugins and buttons: Instagram plugins and buttons – This may include, for example, content such as images, videos or text and buttons with which users can share content from this online offering within Instagram. Service provider: https://www.instagram.com, Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy Policy: http://instagram.com/about/legal/privacy.
Twitter plugins and buttons: Twitter plugins and buttons – This may include, for example, content such as images, videos or text and buttons with which users can share content from this online service within Twitter. Service provider: Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Website: https://twitter.com/de; Privacy Policy: https://twitter.com/de/privacy.
YouTube: Videos; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://www.youtube.com; Privacy Policy: https://policies.google.com/privacy; Privacy Shield (Safeguarding the level of data protection when processing data in the USA): https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active; Opt-Out: Opt-out plugin: http://tools.google.com/dlpage/gaoptout?hl=de; Settings for the display of adverts: https://adssettings.google.com/authenticated.
Vimeo: Video platform; Service provider: Vimeo Inc, Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA; Website: https: //vimeo.com; Privacy Policy: https: //vimeo.com/privacy; Opt-Out: We would like to point out that Vimeo may use Google Analytics and refer to the privacy policy(https://policies.google.com/privacy) as well as the opt-out options for Google Analytics(http://tools.google.com/dlpage/gaoptout?hl=de) or Google’s settings for data use for marketing purposes(https://adssettings.google.com/).
Deletion of data
The data processed by us will be deleted in accordance with the legal requirements as soon as the consent given for processing is revoked or other authorisations cease to apply (e.g. if the purpose for processing this data no longer applies or it is not required for the purpose).
If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person.
Further information on the deletion of personal data can also be found in the individual data protection notices of this privacy policy.
Changing and updating the privacy policy
We ask you to inform yourself regularly about the content of our privacy policy. We will amend the privacy policy as soon as changes to the data processing carried out by us make this necessary. We will inform you as soon as the changes require your co-operation (e.g. consent) or other individual notification.
If we provide addresses and contact information of companies and organisations in this privacy policy, please note that the addresses may change over time and please check the information before contacting us.
Rights of the data subjects
As a data subject, you are entitled to various rights under the GDPR, which arise in particular from Art. 15 to 18 and 21 GDPR:
- Right to object: you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
- Right to withdraw consent: You have the right to withdraw any consent you have given at any time.
- Right to information: You have the right to request confirmation as to whether the data in question is being processed and to request information about this data as well as further information and a copy of the data in accordance with the legal requirements.
- Right to rectification: You have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you in accordance with the legal requirements.
- Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to demand that data concerning you be erased immediately or, alternatively, to demand that the processing of the data be restricted in accordance with the legal requirements.
- Right to data portability: You have the right to receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with the legal requirements or to request that it be transferred to another controller.
- Complaint to supervisory authority: You also have the right to lodge acomplaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
Online dispute resolution
The European Commission provides a platform for online dispute resolution at https://ec.europa.eu/consumers/odr/, which consumers can use to resolve a dispute and where further information on dispute resolution can be found.
Out-of-court dispute resolution
We are neither obliged nor willing to participate in a dispute resolution procedure before a consumer arbitration board in the event of a dispute with a consumer.