Skip to content
  1. Home
  2. Data privacy

Kräuterhaus Sanct Bernhard KG Data Protection Declaration

We are delighted that you are visiting our web site and thank you for your interest. Below we inform you about how we handle your personal data when using our web site. Personal data are all data relating to an identified or identifiable individual.

A.      Information on responsibilities

Kräuterhaus Sanct Bernhard KG
Helfensteinstr. 47

73342 Bad Ditzenbach

Germany
info@kraeuterhaus.de

B.      Data protection officer contact data

Data protection officer of Kräuterhaus Sanct Bernhard KG

Kräuterhaus Sanct Bernhard KG

Helfensteinstr. 47

73342 Bad Ditzenbach

Germany

datenschutz@kraeuterhaus.de

C.      Processing personal data       

1.       Data collation when visiting our web site

If you only use our web site for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server when you visit our web site. This relates to the following data:

- Our visited web site

- Date and time at the time of access

- Volume of transmitted data in bytes

- Source/reference from which you reached the page

- Browser used

- Operating system used

- IP address used

This data is also saved in so-called logfiles in our system. This data is not saved together with other personal data of the visitor.

Nor does any transfer of this data to third parties take place. In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing.

Temporary storage of the IP address by the system is necessary to enable delivery of the web site. For this, the IP address must be stored for the duration of the session. Storage of data in logfiles takes place to ensure the functionality of the web site. In addition, the files are used to optimise the web site and to ensure the security of our information technology systems.

The legal basis for the temporary storage of the data as well as the storage in the context of the log files is Art. 6 para. 1 lit. f) GDPR. The legitimate interest in the data processing required for this purpose exists in the aforementioned processing purposes.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection or processing. In the case of the collection and storage of the data for the provision of the web site, this is the case when the respective session has ended. In the case of storage of the data in logfiles, this is the case seven days after collection at the latest.

According to Art. 21 GDPR, you have the right, at any time, to object to the processing of the data for reasons that arise from your particular situation. We will then no longer process the data unless it is possible to demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or if its processing is for the purpose of enforcing, pursuing or defending legal claims.

To exercise a corresponding objection, the visitor may contact us in particular by email using the e-mail address datenschutz@kraeuterhaus.de. The data will be deleted in case of a legitimate objection.

2.       Contact form and e-mail contact

By using our contact form, the data entered in the input mask will be transmitted to us and saved. At the time of the sending the message, the following data will also be saved:

•           Date and time

Alternatively, contact via the provided e-mail address is possible. In this case, the visitor's personal data transmitted by e-mail will be stored.

The data will be used exclusively for processing the respective enquiry. Data is not passed onto third parties in association with this. In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing

Personal data from the input mask or your e-mail request is processed solely to process the contact. This also represents the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

The legal basis for processing the data, which is processed in connection with an enquiry is Art. 6 para. 1 lit. f) GDPR. If contact has the intention of concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR.

The data will be deleted as soon as it is no longer necessary to achieve the purpose of its collection. With regard to the personal data from the input mask of the contact form and data sent by e-mail, this is the case when the respective conversation or enquiry has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been finally clarified. The additional personal data collected during the sending process will be deleted at the latest after a period of seven days from collection of the data.

You can object to the storage of your personal data at any time in accordance with Art. 21 GDPR. The conversation cannot be continued in this case.

To exercise a corresponding objection or revocation, you can contact us in particular by email using the email address datenschutz@kraeuterhaus.de. The data, which was saved during the contact, will be deleted in the above cases.

3.       Customer account

When opening a customer account, the data shown on the entry form is collected. This data is processed exclusively for the purpose of processing pre-contractual measures, for the performance of the contract and for the purpose of customer care (for example, in order to be able to offer certain overviews or easier order processing). At the time of the sending the customer account registration, the following data will also be saved:

•           Date and time

With the exception of the transfer of data in the context of goods orders (see below under point 4.) transfer of this data to third parties does not take place. In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing.

The legal basis for the processing of your data is Art. 6 para. 1 lit. b) GDPR.

You have the option of deleting your customer account at any time. For this, please get in touch with us using the contact data provided above under A. With the dissolution of the customer account, your data will be deleted or – if necessary – restricted for the duration of tax and commercial retention periods for these purposes and then deleted, unless you have expressly consented to a further use of your data, or if we have reserved further data use, which is permitted by law and about which we inform you in this statement.

4.       Order placement

In the context of the order of goods, the data, which is evident from the respective entry form, which we need to conclude the contract or process the contract and without which the user can not conclude the order, is collected.

The data will be used exclusively for the purpose of concluding and executing the contract as well as - with regard to name, address and email address - for the purposes of the described advertising purposes under points 5 and 6.

As part of the contract, your data will be forwarded to the transport company commissioned with the delivery, insofar as this is necessary for delivery of the goods. We will pass on your payment details as part of the contractually agreed payment processing to the commissioned credit institution as well as to the payment service providers involved if this is necessary for payment processing.

In case of the payment methods credit card via PayPal, direct debit via PayPal or - if offered - “purchase on account” via PayPal, we pass on your payment data within the scope of payment processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”). For further information on the processing of data by PayPal, please refer to the PayPal privacy policy: https://www.paypal.com/en/webapps/mpp/ua/privacy-ful

In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework of the hosting and maintenance of our systems. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing.

The legal basis for the processing of your data within the scope of ordering goods is Art. 6 para. 1 lit. b) GDPR.

After full processing of the contract, your data will be deleted or – if necessary within the scope of tax and commercial retention periods – will continue to be saved and then deleted after expiry of the above deadlines, unless you have expressly consented to a further use of your data, or if we have reserved further data use, which is permitted by law and about which we inform you in this statement.

5.       E-mail newsletter

5.1    E-mail newsletter after subscription

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory requirement for sending the newsletter is your e-mail address. The indication of further possible data is voluntary and will be used to address you personally. We use the double opt-in procedure to send the newsletter. This means that we will only send you an e-mail newsletter if you have explicitly confirmed to us that you agree to the newsletter being sent. We will then send you a confirmation e-mail asking you to confirm that you wish to receive newsletters in the future by clicking on a link.

In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework newsletter dispatch. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace a possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter will be used exclusively for promotional purposes by means of the newsletter. You can deregister from the newsletter at any time via the link provided in the newsletter, or by sending us appropriate notification to the responsible person stated under A. After cancellation, your e-mail address will no longer be used for this advertising purpose and deleted immediately, unless you have expressly consented to a further use of your data or we reserve the right to further data usage, which is permitted by law and about which we inform you in this statement.

5.2    E-mail newsletter to customers without subscription

Furthermore, we will use your e-mail address that we receive in connection with the sale of goods or services solely in the form of our newsletter to directly advertise our own goods or services which are similar to the ones ordered by you – insofar as you have not objected to this utilisation.

In strict compliance with the relevant data protection regulations, our integrated and carefully selected service providers may be the recipients of the data within the framework newsletter dispatch. This is done on the basis of order processing agreements by which the service providers are contractually bound and in this respect we remain responsible for data processing

The legal basis for the processing of your data is Art. 6 para. 1 lit. f) GDPR. In this context, the legitimate interest required in this context is our interest in the possibility of direct mail advertising.

You can object to your e-mail address being utilised for the above advertising purpose at any time. Your objection (and deregistration from our newsletter as a result) can be exercised by sending an appropriate message to our e-mail address datenschutz@kraeuterhaus.de.

6.       Advertising by post

On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, postal address and - if we have received this additional information from you as part of the contractual relationship - your title, academic degree, year of birth and occupation, trade or business name in accordance with Art. 6 para. 1 lit. f GDPR and to use them to send interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible (see above A.).

7.       Contact for evaluation reminder

We use your e-mail address to send a one-off reminder to submit an evaluation of your order for the rating system we use, provided that you give us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can revoke your consent at any time by sending a message to the responsible person.

8.       Application process

If you apply to us for the purpose of establishing an employment relationship, we process your personal data, which you have submitted to us in the context of your application, solely for the purpose of carrying out the application process (procedure for deciding on the establishment of an employment relationship). The legal basis for the processing of data is § 26 para. 1 BDSG in conjunction with Art. 6 para. 1 lit. b) (initiation of employment) and Art. 88 GDPR. We process voluntary information as part of your application on the basis of § 26 para. 2 BDSG in conjunction with Art. 6 para. 1 lit. a) (consent) and Art. 88 GDPR.

After completing the application process, we will save the data for a maximum of 6 months from the end of the application process. This is done to defend any claims under the General Equal Treatment Act (AGG). The corresponding data is deleted once the above deadline has passed.

9.       Cookies

In order to make the visit to our web site attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files, which are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us, or our partner company (third-party cookies), to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process individual user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (for example, remembering the contents of a virtual shopping cart for a later visit to the web site). Insofar as personal cookies are also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 para. 1 lit. f GDPR for safeguarding our legitimate interests to the best possible functionality of the web site as well as a customer-friendly and effective design of the page visit.

We may work with advertising partners to help us make our web site more interesting to you. For this purpose, in this case, when you visit our web site, cookies from partner companies are stored on your hard disk (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of cookies and the scope of the information collected in the following paragraphs.

Please note that you can set your browser so that you can be informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Every browser differs in the way it manages cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browser under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our web site may be limited.

10   Use of social media

10.1     Use of Youtube videos

This website uses Youtube embedding feature to display and play videos of “Youtube” provided by Google Ireland Limited (“Google”), a company registered and operated under Irish law (registration number: 368047) at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The extended privacy mode is used, which, according to the provider, only stores user information when starting to play the video. When the playback of embedded Youtube videos starts, the provider “Youtube” uses cookies to collect information about user behaviour. According to information from “Youtube”, these are used, amongst others, to collect video statistics, improve user-friendliness and prevent abusive practices. If you're logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish your profile to be assigned on YouTube, you must log out before activating the button. Google stores your data (even for users not logged-in) as usage profiles and evaluates them. According to Art. 6 para. 1 lit. f GDPR, such an evaluation is based on the legitimate interests of Google in the display of personalised advertising, market research and/or tailor-made design of its web site. You have a right to object to the creation of these user profiles, but you must contact YouTube to exercise your right.

Regardless of any playback of the embedded video, every time you visit this web site, it will connect to the Google Network “DoubleClick”, which may trigger further data processing without our having any influence.

Google LLC, located in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

For more information on data protection at “YouTube”, please refer to the provider’s privacy policy at: https://www.google.com/intl/en/policies/privacy

11.    Online marketing

11.1 Use of Google Ads Conversion-Tracking

This website uses the “Google Ads” online advertising program and, as part of Google Ads, conversion tracking from Google Ireland Limited (“Google”), a company registered and operated under Irish law (Registry Number: 368047), located in Gordon House. Barrow Street, Dublin 4, Ireland (“Google”). We use the Google Ads service to draw attention to our attractive offers with the help of advertising materials (so-called Google Ads) on external web sites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you, to make our web site more interesting to you and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an AdWords ad placed by Google. Cookies are small text files, which are stored on your computer system. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this web site and the cookie has not expired yet, Google and we can recognise that the user clicked on the ad and was redirected to this page. Every Google Ads advertiser receives a different cookie. Cookies cannot be tracked through AdWords advertisers' web sites. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. Customers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users. If you do not want to participate in tracking, you can easily block use by disabling the Google Conversion Tracking cookie via your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics. We use Google Ads based on our legitimate interest in a targeted advertising according to Art. 6 para. 1 lit. f GDPR.

Google LLC, located in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

For more information about Google’s privacy policy, visit the following Internet address: https://www.google.de/policies/privacy/

You can permanently deactivate cookies by blocking them by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link:

https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this web site may not be used or may only be able to be used with restrictions if you have deactivated the use of cookies.

11.2 Use of affiliate programs

            - Firstlead GmbH - ADCELL

We participate in the partner program “ADCELL” of Firstlead GmbH, Rosenfelder St. 15-16, 10315 Berlin (hereinafter “ADCELL”). As part of its services, ADCELL stores cookies on users’ end devices to track transactions (such as leads and sales) when a visitor clicks on an ad with the partner link. These cookies are used solely for the purpose of correctly establishing the success of an advertising medium and the corresponding billing within the network. ADCELL also uses so-called tracking pixels. These can be used to evaluate information such as visitor traffic on the pages.

The information generated by cookies and tracking pixels on the use of this web site (including the IP address) and delivery of advertising formats are transmitted to a server of ADCELL and stored there. Among other things, ADCELL can detect that the partner link was clicked on this web site. ADCELL may provide this (anonymised) information to contractors under certain circumstances, but data such as the IP address will not be compiled with other stored data.

Insofar as the information also contains personal data, the described processing takes place on the basis of our legitimate financial interest in the settlement of commission payments with ADCELL in accordance with Art. 6 para. 1 lit. f GDPR.

If you want to block analysis of the user behaviour via cookies, you can set your browser so that you are informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. If you do not agree to the processing of your data described above, you have the option of deactivating data processing at www.adcell.de/datenschutz.

            - affilinet GmbH

This web site participates in affiliate programs of affilinet GmbH (Sapporobogen 6-8, 80637 Munich), a service for the integration of advertisements in the form of text links, image links, banners or input masks. Affilinet uses cookies, which allows analysis of the use of the web site. Affilinet uses so-called Web-Beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on web pages. The information generated by cookies and web beacons on the use of this web site (including your IP address) and the delivery of advertising formats are transmitted to an affilinet server and stored there. This information can be passed on by affilinet to contractual partners of affilinet. However, Affilinet will not compile your IP address with other data you have stored. You can prevent the installation of cookies by setting your browser software accordingly. For more information about affilinet’s data usage, please read the company’s privacy policy: https://www.affili.net/de/footeritem/datenschutz

            - AWIN AG

We take part in the Performance Advertising Network of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter “AWIN”). As part of its tracking services, AWIN stores cookies on end devices of users who visit or use web sites or other online services of its customers (for example, register for a newsletter or place an order in an online store) for the documentation of transactions (such as leads and sales). These cookies are used solely for the purpose of correctly establishing the success of an advertising medium and the corresponding billing within its network.

In a cookie, only the information is placed about when a particular advertising material was clicked on via an end device. In the AWIN Tracking Cookies an individual number of digits, but not assignable to the individual user, is deposited, with which the affiliate program of an advertiser, the publisher, documents the time of the action of the user (click or view). In doing so, AWIN also collects information about the end device from which a transaction is being performed, e.g. the operating system and the calling browser. Insofar as the information also contains personal data, the described processing takes place on the basis of our legitimate financial interest in the settlement of commission payments with AWIN in accordance with Art. 6 para. 1 lit. f GDPR.

If you do not want to store cookies in your browser, you can do so by selecting the appropriate browser setting. You can deactivate the storage of cookies under Extras/Internet options in your browser, restrict them to certain web sites or set your browser to notify you when a cookie is sent. Please note, however, that in this case you will have to expect a limited representation of the online offers and limited user guidance. You can also delete cookies at any time. In this case, the information stored therein will be removed from your end device.

For more information about AWIN’s data usage, please read the company’s privacy policy: https://www.awin.com/gb/privacy

            - belboon GmbH

The party responsible for processing has integrated Belboon components on this web site. Belboon is a German affiliate network, which offers affiliate marketing. Affiliate marketing is an Internet-based form of distribution that allows commercial operators of web sites, the so-called merchants or advertisers, to show advertising, which is usually remunerated via click or sale commissions, on third-party web sites, i.e. sales partners, who are also referred to as affiliates or publishers. Through the affiliate network, the merchant provides an advertising material, i.e. a banner or another suitable means of Internet advertising available, which subsequently incorporated by an affiliate on their own web sites or other channels, such as the keyword advertising or e-mail marketing.
The operator of belboon is belboon GmbH, Weinmeisterstr. 12-14, 10178 Berlin.
Belboon sets a cookie on the information technology system of the person concerned. Cookies have already been explained above. The Belboon tracking cookie does not save personal data. Only the identification number of the affiliate, i.e. the partner mediating the potential customer, as well as the ordinal number of the visitor to a web site and the clicked advertising medium are stored. The purpose of the storage of this data is the processing of commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Belboon.


The affected person can prevent the setting of cookies by our web site, as shown above, at any time by means of a corresponding setting in the Internet browser used and thus permanently contradict the placement of cookies. Such a setting of the Internet browser used would also prevent Belboon from setting a cookie on the information technology system of the person concerned. In addition, cookies already set by Belboon can be deleted at any time via an Internet browser or other software programs.
Belboon's applicable privacy policy is available at https://www.belboon.com/de/ueber-uns/datenschutz/.

11.3 Use of coupon marketing service providers

            - Sovendus Sales

In order to select a currently interesting voucher offer for you, we will transmit your pseudonymised hash value of your e-mail address and your IP-address in encrypted form to Sovendus GmbH, Hermann-Veit-Straße 6, D‑76135 Karlsruhe (Sovendus) (Art. 6 par. 1 f GDPR). The pseudonymised hash value of your e-mail address is used to consider a possibly existing objection to receive offers from Sovendus (Art. 21 par.3, Art. 6 par. 1 c GDPR). The IP-address will be exclusively used for data security purposes and as a rule the same will be anonymised after seven days (Art. 6 Abs.1 f GDPR). Furthermore, we will transmit order number, order value with currency, session ID, coupon code, and time stamp in pseudonymised form to Sovendus for billing purposes (Art. 6 Abs.1 f GDPR). If you are interested in a voucher offer of Sovendus, while there is no objection existing to receive such offers, and if you click on the voucher banner, we will transmit your salutation, your name, your postal code and country and your e‑mail address in encrypted form to Sovendus to prepare a voucher (Art. 6 par. 1 b, f GDPR).

You will find further information about the processing of your data by Sovendus in their Online Data Protection Notice at https://www.sovendus.co.uk/privacy_policy.

11.4 Use of evaluation services

            - Trustpilot A/S:

Customer ratings are particularly productive for transparency and optimisation, therefore we offer you the opportunity to make an evaluation regarding our service via the evaluation service www.trustpilot.de offered by Trustpilot. We use an interface to the independent rating portal Trustpilot, which is operated by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark. We are unable to individually control or influence rating invitations. This is the only way to guarantee a complete, independent and unimpaired customer rating for our company and our services. The data transferred to the business app for this purpose (name, first name, e-mail address and reference number) are transferred to our business app by Trustpilot and are neither used by Trustpilot nor passed on to third parties. A review of our company can be found at https://de.trustpilot.com/review/. You, as a customer, are free to provide a review. The creation/opening of a user profile at Trustpilot is required for the submission of a rating or the collection of customer feedback. In addition to a rating for the inviting company, reviews for any company can also be entered on the Trustpilot rating portal. However, in the case of a rating without a prior invitation, a clear reference to a contractual relationship with the rated company is required. You can receive additional information from Trustpilot. If a review is made by clicking on the link contained in the invitation, after entering the personal data, usually your name and e-mail address for verification, a user profile is automatically created at Trustpilot. This is associated with consent to the privacy policy and the terms and conditions of Trustpilot. These can be viewed on the Trustpilot web site at: https://de.legal.trustpilot.com/end-user-privacy-terms. By participating in this feedback system, your rating will be published on our web site as well as on the web site of Trustpilot. You can find additional information in data protection regulations of Trustpilot and in its terms and conditions.

If you do not agree with this, please send us an e-mail.

12.    Web analysis services

12.1 Econda (econda GmbH)

This web site uses technologies from econda GmbH, Zimmerstr. 6, 76137 Karlsruhe (www.econda.de) based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 para. 1 lit. f GDPR to collect and store data. From this data, pseudonymised usage profiles can be created and evaluated for the same purpose. Cookies can be used for this. Cookies are small text files stored locally in the cache of the site visitor's Internet browser. Cookies allow recognition of the Internet browser amongst other. The data collected with econda technology will not be used to personally identify the visitor to this web site without the explicit consent of the person concerned and will not be combined with personal data about the bearer of the pseudonym. Users may object to data collection and storage at any time with effect for the future. In order to object to data collection and storage of your visitor data for the future, you can obtain an opt-out cookie from econda under the following link, which ensures that no visitor data from your browser will be collected and stored on econda in the future:

https://www.econda.de/econda/datenschutz/widerruf-datenspeicherung.html

The opt-out-cookie has the name “econdaNoTrack” and is set by “econda”. For more information about econda’s privacy policy, visit the following Internet address:

https://www.econda.de/econda/datenschutz/datenschutzerklaerung.html

12.2 Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of your use of the web site. The information generated by cookies on the use of this web site (including the shortened IP address) are generally transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension “_anonymizeIp ()”, which ensures anonymisation of the IP address by shortening and excludes a direct personal reference. The extension means that your IP address will be shortened by Google beforehand within member states of the European Union or other contract states to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is sent to and shortened by Google servers in the USA.  In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the web site, to compile reports on web site activity and to provide other services related to web site activity and Internet usage to us. The IP address provided by your browser as part of Google Analytics will not be compiled with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this web site. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the web site (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from entering this web site in the future (this opt-out cookie only works in this browser and only for this domain, to delete your cookies in this browser, you must click this link again): Disable Google Analytics

Google LLC, located in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

This site also uses Google Analytics for cross-device analysis of visitor traffic conducted through a user ID. When a page is first visited, the user is assigned a unique, permanent and anonymised ID that is set across devices. This makes it possible to assign interaction data from different devices and from different sessions to a single user. The user ID does not contain any personal data and does not transmit it to Google.

Users may object to data collection and storage at any time with effect for the future via the user ID. To do this, you will need to disable Google Analytics on any system you use, such as another browser or your mobile device.

This can be deactivated using a Google browser plug-in (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser plug-in or within browsers on mobile devices, please click on the following link to set an opt-out cookie that will prevent Google Analytics from entering this web site in the future (this opt-out cookie only works in this browser and only for this domain, to delete your cookies in this browser, you must click this link again): Disable Google Analytics

Further information on Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

13.    Retargeting/remarketing/recommendation advertising

13.1 Bing Ads (Microsoft Corporation)
This web site uses the conversion tracking technology “Bing Ads” from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads places a cookie on your computer if you have reached our web site via a Microsoft Bing Ad. Cookies are small text files, which are stored on your computer system. These cookies lose their validity after 180 days and are not used for personal identification. If the user visits certain pages of this web site and the cookie has not expired yet, Microsoft and we can recognise that the user clicked on the ad and was redirected to this page (conversion page). If personal data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in effective marketing.

The information gathered using the conversion cookie is used to generate conversion statistics i.e. to establish how many uses access a conversion page after clicking on an ad. We are told the total number of users who clicked on out ad and were redirected to a conversion tracking tag page. However, we do not receive information that personally identifies users.

The Microsoft Corporation, located in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

If you do not want to participate in tracking, you can easily opt-out of this by disabling the Bing Ads Conversion Tracking cookie via your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics. Alternatively, using the EU opt-out site http://www.youronlinechoices.com/praferenzmanagement/, you can check if Microsoft advertising cookies are set in your browser and disable them.

For more information about Microsoft Bing Ad’s privacy policy, visit the following Internet address: https://privacy.microsoft.com/de-de/privacystatement

13.2 Criteo (Criteo SA)
On this web site, the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”), uses “cookie” text files to provide information about the surfing habits of web site visitors are collected, stored and evaluated in pseudonymised form based on our legitimate interest in displaying personalised advertisements Art. 6 para. 1 lit. f GDPR. Using an algorithm, Criteo analyses the surfing behaviour and can then display targeted product recommendations as personalised advertising banners on other web sites (so-called publishers). This collated data can never be used to personally identify the visitor to this web site. Any other use or transfer to a third party does not take place.

To contradict the collection of data and creation of pseudonymised user profiles for the future, you can use the following so-called opt-out cookie:

Criteo opt-out (https://www.criteo.com/de/privacy/)

You can obtain further information on the Criteo technology in the Criteo data protection regulations:

https://www.criteo.com/de/privacy/

13.3 Google Ads Remarketing
Our web site uses the features of Google Ads Remarketing to advertise this web site on Google’s search results, as well as third party web sites. The provider is Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Processing is based on our legitimate interest in optimal marketing our web site in accordance with Art. 6 para. 1 lit. f GDPR.

Any further data processing will only take place if you have agreed with Google that your Internet and App browser history will be linked to your Google Account by Google and information from your Google Account will be used to personalise the ads you view on the web. In this case, if you are logged into Google when visiting our web site, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily link your personal information with Google Analytics data to create audiences.

You can deactivate cookies by setting your browser software accordingly or by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to find out about setting cookies and how to make settings. Finally, you can set your browser so that you are informed about the placement of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. If you do not accept cookies, the functionality of our web site may be limited.

Google LLC, located in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

Further information and the data protection regulations regarding advertising and Google can be found here:

https://www.google.com/policies/technologies/ads/

13.4 Facebook Pixel
This website uses the visitor action pixel from Facebook to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

In this way, the behaviour of page visitors can be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimised.

The data collected is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage policy. This enables Facebook to show advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as site operator.

The use of Facebook Pixel is based on Art. 6 para. 1 lit. f) GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding agreement has been requested (e.g. agreement to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. f) GDPR; the agreement can be revoked at any time.
You can find more information about protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.

You can also deactivate the "Custom Audiences" remarketing function in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can disable Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

14.    Tools and others

- Google Maps

On our website, we use Google Maps (API) by Google Ireland Limited (“Google”), a company registered and operated under Irish law (register number: 368047), located in Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. The use of this service will show you our location and make it easier for you to find us.

When you visit any of the sub pages where the Google Maps map is incorporated, information about your use of our web site (such as your IP address) is transmitted to Google's servers in the United States and stored there. This is done regardless of whether Google provides a user account that you are logged in to, or if there is no user account. If you're logged in to Google, your data will be assigned directly to your account. If you do not wish your profile to be assigned on Google, you must log out before activating the button. Google stores your data (even for users not logged-in) as usage profiles and evaluates them. Collection, storage and evaluation take place according to Art. 6 para. 1 lit. f GDPR, based on the legitimate interests of Google in the display of personalised advertising, market research and/or tailor-made design of Google web site. You have a right to object to the creation of these user profiles, but you must contact Google to exercise your right.

Google LLC, located in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection in the EU.

If you disagree with the future transmission of your data to Google when using Google Maps, you can also disable the Google Maps web service completely by turning off the JavaScript application in your browser. Google Maps and therefore the map display on this web site will then not be able to be used.

The Google terms of use can be viewed at https://www.google.de/intl/de/policies/terms/regional.html and the additional conditions of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

You will find detailed information on data protection associated with the use of Google Maps on the Google Internet site (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/

15.    Rights of the data subject

You generally have the following rights:

            Right to information (Art. 15 GDPR)

            Right tocorrection (Art. 16 GDPR)

            Right to deletion (Art. 17 GDPR)

            Right to restrict processing (Art. 18f. GDPR)

            Right to data portability (Art. 20 GDPR)

            Right to object to processing (Art. 21 GDPR)

Right of revocation

THE FOLLOWING APPLIES, IF YOU HAVE GIVEN US YOUR CONSENT TO PROCESS PERSONAL DATA:

YOU HAVE THE RIGHT TO REVOKE YOUR CONSENT AT ANY TIME FOR THE FUTURE. HOWEVER, SUCH A REVOCATION DOES NOT AFFECT THE LEGALITY OF THE PROCESSING DONE ON THE BASIS OF THE CONSENT.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the member state of your place of residence, employment or the place of alleged infringement, in accordance with Article 77 GDPR, if you consider that the processing of your personal data breaches the GDPR.

The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Article 78 of the GDPR.

16.    Data security

For security reasons and to protect the transmission of personal data and other confidential contents (for example, orders or inquiries to the person responsible), this web site uses an SSL or TLS encryption. You can recognise an encrypted connection by the string “https: //” and the lock icon in your browser bar.

17.    Actuality and changes to this data protection declaration

This data protection declaration is the current valid version and was updated in November 2018.

As a result of the further development of our web site and offers thereof or due to changes in legal or official requirements, it may be necessary to change this data protection declaration. The current data protection declaration can be accessed and printed on the web site at any time.

Subscribe to our newsletter