General information
In the following, we provide information about the collection of personal data when using our website in accordance with Art. 13 GDPR. Personal data are all data that can be related to you personally, e.g. B. Name, address, email addresses, user behavior.
Responsible acc. Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is
FreeDiscussions S.r.l.
Piazza Enrico Enriquez 22
47891 Dogana
San Marino
You can contact our data protection officer at:
[email protected]
Provision of the website and log files
a. Type and purpose of processing
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person. In particular, they are processed for the following purposes:
Ensuring a problem-free connection to the website,
Ensuring smooth use of our website,
Evaluation of system security and stability as well as
for further administrative purposes.
We do not use your data to draw conclusions about you personally. Information of this kind may be statistically evaluated by us in order to optimize our website and the technology behind it.
b. Legal basis for processing
Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website.
c. Data categories
IP address, timestamp, device data, referrer, etc.
d. receiver
Recipients of the data are internal employees in technology, marketing, salest and, if necessary, contract processors who work as contract processors for the operation and maintenance of our website.
e. Storage periods
The data will be deleted as soon as it is no longer required for the purpose of the survey. For the data used to provide the website, this is generally the case when the respective session has ended.
f. Statutory / contractual requirement
The provision of the aforementioned personal data is not required by law or contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted.
g. Third country transfer
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Possibility of objection
You have the right to object to the processing of your personal data at any time. You can inform us of your revocation at any time using the contact option given at the beginning of this data protection notice.
i. Automated decision making and profiling
As a responsible company, we do not use automatic decision-making or profiling in this data processing.
Use of cookies
In addition to the previously mentioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which the body that sets the cookie (in this case by us) receives certain information. They are used to make the website as a whole more user-friendly and effective.
We distinguish between two categories of cookies: (a) essential cookies, without which the functionality of our website would be limited, and (b) optional cookies for the purposes of website analysis and marketing.
The use of optional cookies is based on your consent (Art. 6(1)(a) GDPR).
In our cookie banner, we describe the optional cookies used on this website in detail.
Which cookie banner do we use?
This website uses the cookie consent technology from CCM19 to obtain your consent to the storage of certain cookies on your device and to document them in compliance with data protection regulations. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn.
Website: https://www.ccm19.de/en/ (hereinafter "CCM19").
When you enter our website, the following personal data is transferred to CCM19:
Your consent (s) or the revocation of your consent (s)
Your IP address
Information about your browser
Information about your device
Time of your visit to the website
In addition, CCM19 saves a cookie in your browser in order to be able to assign the consent given or the revocation thereof. The data collected in this way will be stored until you ask us to delete it, delete the cookie first cookie yourself or the purpose for data storage no longer applies. Mandatory statutory retention requirements remain unaffected.
CCM19 is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 Para. 1 S. 1 lit. c GDPR.
We have concluded an order processing contract with CCM19. This is a contract prescribed by data protection law, which ensures that CCM19processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Data subject rights
If you as a user process personal data, you are considered to be the data subject according to the GDPR. Affected persons have the following rights vis-à-vis the person responsible:
• Right to information (Art. 15 GDPR)
• Right to correction or deletion of personal data (Art. 16, 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to notification in connection with the correction or deletion of your
personal data or the restriction of processing (Art. 19 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right of objection (Art. 21 GDPR)
• Right to revoke declarations of consent given. The legality of the data
processing carried out up to the point of revocation remains unaffected on the
basis of the previously valid consent. (Art. 7 Para. 3 GDPR)
• Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)
You can find the competent supervisory authority for data protection issues under the following link.
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
Newsletter
a. Nature and purpose of the processing
Your data will be used exclusively to send you the subscribed newsletter by e-mail. Your name is provided in order to be able to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject. To receive the newsletter, it is sufficient to provide your e-mail address. When registering to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers may also be informed by e-mail about circumstances relevant to the service or registration (for example, changes to the newsletter offer or technical circumstances). For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double-opt-in" procedure. For this purpose, we log the order of the newsletter, the sending of a confirmation e-mail and the receipt of the response requested herewith. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
If you have made a purchase of goods and/or services from us, we are entitled to send you information about our own similar goods and services via the e-mail address sent during the purchase (§ 7 III UWG). You can object to this use of your e-mail address at any time, either as a whole or for individual measures, e.g. by e-mail [email protected], without incurring any costs other than the transmission costs according to the basic rates.
For sending e-mails we use the software Emarsys (www.emarsys.com).
We use internal analytics about how newsletters are opened and used.
The following data is evaluated as part of the analysis Newsletter ID, Click or view, date, IP address, customer number.
The analysis of this data enables us to constantly improve our service offer and to adapt it to your customer wishes.
b. Legal basis of the processing
On the basis of your expressly given consent (Art. 6 para. 1 lit. a GDPR) or on the basis of legitimate interest (Art. 6 para. 1 lit. f GDPR) in conjunction with the requirements of §7 III UWG, we will regularly send you our newsletter or comparable information by e-mail to your specified e-mail address.
c. Data categories
E-mail, first-surname, customer number, language variant, IP address, etc.
d. Recipients
e. Storage periods
The data will only be processed in this context as long as the relevant consent has been given or you have objected to the processing. After that, they will be deleted.
f. Legal / contractual requirement
The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without existing consent.
g. Transfer to third countries
Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Revocation of consent
You can revoke your consent to the storage of your personal data and its use for newsletter dispatch at any time with effect for the future. In each newsletter, you will find a corresponding link for this purpose. In addition, you can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option provided at the end of this privacy notice.
i. Automated decision making and profiling
As a responsible company, we do not use automatic decision making or profiling in this data processing.
Newsletter Tracking
a. Beschreibung und Umfang der Verarbeitung personenbezogener Daten
Für den Versand von E-Mails verwenden wir die Software Emarsys (www.emarsys.com). Hierfür werden folgende Daten verarbeitet:
E-Mail
Kundennummer
Sprachvariante
Vorname, Nachname
Optional Artikelinformationen
Gutscheincode im Fall von Aktionen
Wir nutzen interne Analysemöglichkeiten darüber, wie die Newsletter geöffnet und benutzt werden.
Im Rahmen der Analyse werden folgende Daten ausgewertet:
Newsletter ID
Klick oder View
Datum
IP- Adresse
Kundennummer
Die Auswertung dieser Daten ermöglicht uns unser Serviceangebot stetig zu verbessern und an deine Kundenwünsche anzupassen.
b. Rechtsgrundlage für die Verarbeitung personenbezogener Daten
Rechtsgrundlage ist Art. 6 Abs. 1 lit. a) DSGVO
c. Dauer der Speicherung
Die Daten werden gelöscht, sobald sie für die Erreichung des Zweckes ihrer Erhebung nicht mehr erforderlich sind.
d. Widerspruchs- und Beseitigungsmöglichkeiten
Du kannst den Bezug des Newsletters jederzeit stornieren. Ein entsprechender Link befindet sich in jeder E-Mail.
Registration
a. Nature and purpose of processing
When you register to use our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and e-mail address). If you are registered with us, you can access content and services that we offer only to registered users. Registered users also have the option, if necessary, to change or delete the data provided during registration at any time. Of course, we will also provide you with information about the personal data we have stored about you at any time.
b. Legal basis of processing
The processing of the data entered during registration is based on the user's consent to the terms of use (Art. 6 para. 1 lit. b GDPR).
c. Data categories
Salutation, first and last name, address, e-mail address, payment method, IP address, date and time of registration, advertising partner through which the access to the site was made
d. Recipients
Recipients of the data are internal employees of IT and Marketing and, if applicable, order processors who are active for the operation and maintenance of our platform. IT service providers are used to fulfill the contract.
e. Storage periods
Data is processed in this context only as long as the corresponding contractual agreement exists. After that, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is based on the user's consent to the terms of use (Art. 6 para. 1 lit. b GDPR). Without the provision of your personal data, we cannot grant you access to our offered content and services.
g. Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
Contact form and e-mail contact
a. Type and purpose of processing
A contact form is available on our website, which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. This data includes e-mail address, first and last name, telephone number.
For the processing of the data, your consent is obtained during the submission process and reference is made to this privacy policy.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.
The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
Your request will be used for the purpose of improving our machine learning-based software. To this end, your request is read by our system in order to improve its quality and offer you an even better service by allocating requests more efficiently and optimizing processes. Further information can be found in our privacy policy.
b. Legal basis for processing
The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR if the user has given his consent.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
c. Data categories
E-mail address
Salutation
First and last name
Customer number
Telephone number
d. Recipient
Recipients of the data are internal employees of the IT and marketing department and, if applicable, order processors such as IT service providers.
e. Storage periods
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.
f. Legal / contractual requirement
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request.
g. Third country transfer
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
Payment services and payment methods
a. Description and scope of the processing of personal data
In order to process payments, the following data is forwarded to the corresponding payment service providers, depending on the selected payment method:
Paypal
If you choose the payment method Paypal, you will automatically be redirected to the site of Paypal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). The authorization and processing of the payment takes place on the website of Paypal.
For the authorization at Paypal, we transmit the following data to Paypal:
First name,
Last name,
Billing address (street, zip code, city),
Delivery address (street, postal code, city),
e-mail address
order value
The privacy policy of Paypal can be found here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Direct debit (ELV):
In the case of direct debit and direct debit, we work with the following payment service providers whose privacy policies can be found here:
Ixopay (https://www.ixolit.com/de/legal/privacy-policy)
SEPAExpress (https://sepa.express/de/datenschutz)
Ingenico (https://ingenico.com/de/legal/Datenschutzerkl%C3%A4rung)
eMerchantPay (https://www.emerchantpay.com/privacy-policy/)
HypoVereinsbank (https://www.hypovereinsbank.de/hvb/footer/datenschutz)
Oberbank (https://www.oberbank.de/datenschutz)
Postbank (https://www.postbank.de/unternehmen/ueber-uns/sicherheit-und-datenschutz/datenschutz.html)
The following data will be transmitted for the purpose of payment processing:
First and last name
IBAN/Account number
BIC/BLZ
Invoice amount
Invoice number
Currency
Invoice date
E-mail address
Credit card
In case of credit card payment method we cooperate with the following payment service providers, you can find their privacy policy here:
Ixopay (https://www.ixolit.com/de/legal/privacy-policy)
Ingenico (https://ingenico.de/payment-services/service/datenschutz)
eMerchantPay (https://www.emerchantpay.com/privacy-policy/)
Truevo (https://truevo.com/privacy-policy/)
StreamPayments (https://streampayments.com/privacy-policy/)
For the purpose of payment processing, the following data will be forwarded to our payment service providers:
Credit card number
CVV number
Expiration date (month/year)
First and last name
Your address
Invoice amount
Currency, country
Invoice date
E-mail address
IP address
b. Legal basis for the processing of personal data
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR.
c. Purpose of data processing
The disclosure of the aforementioned data and its processing is mandatory for the performance of the contract and fraud detection and prevention.
d. Duration of storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.
e. Possibilities of objection and elimination
The collection of data and its storage and processing is mandatory for the execution of the contract. Therefore, there is no possibility of early objection and removal on your part.
f. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
Cloudflare
We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website.
The legal basis is our legitimate interest according to Art. 6 para. 1 lit. f GDPR. A CDN is a network of [globally] distributed servers that is able to deliver optimized content to the website user. For this purpose, personal data may be processed in server log files by Cloudflare.
The recipient of your personal data is Cloudflare and acting as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f GDPR not to operate a content delivery network ourselves.
You have the right to object to the processing. Whether the objection is successful is to be determined as part of a balancing of interests.
The processing of the data provided under this section is not required by law or contract, but the functionality of the website is not guaranteed without the processing.
Your personal data will be stored by Cloudflare for as long as necessary for the purposes described.
For more information on objection and removal options vis-à-vis Cloudflare, please see: Cloudflare DPA
Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf
Google Analytics
a. Type and purpose of processing
This website uses Google Analytics, a web analysis service from the Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies", ie text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The purpose of data processing is to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services are then to be provided.
b. Legal basis for processing
The data entered is processed on the basis of the user's consent (Art. 6 Para. 1 lit. a GDPR).
c. Data categories
IP address (shortened/anonymized)
d. receiver
Employees of the sales and marketing department of the own company
Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland
e. Storage periods
In this context, data is only processed as long as the relevant consent is available. They will then be deleted unless there are any statutory retention requirements. To contact us in this context, please use the contact details given at the beginning of this data protection declaration.
f. Statutory / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.
g. Third country transfer
The processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country, we have concluded the standard data protection clauses with Google (Analytics).
h. Revocation of Consent
You can revoke your consent to the storage of your personal data at any time with effect for the future.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the available browser plug-in: " Browser add-on to deactivate Google Analytics ".
i. Automatic decision making and profiling
With the help of the tracking tool Google Analytics, the behavior of the website visitors can be evaluated and the interests analyzed. To do this, we create a pseudonymous user profile.
Google Tag Manager
Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.
b. Legal basis of the processing
The processing of the entered data is based on the user's consent (Art. 6 para. 1 lit. a GDPR).
c. Data categories
IP address
d. Recipients
Recipients of the data are internal employees of the IT and marketing department and Google as a processor. For this purpose, we have concluded the corresponding order processing agreement with Google.
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they will be deleted, provided that there are no legal storage obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Profiling
The Google Tag Manager tool can be used to evaluate the behavior of visitors to the website and analyze their interests.
Google AdWords and Google Display Network
a. Nature and purpose of the processing
Our website uses Google conversion tracking. The operating company of the Google AdWords services is Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. If you have reached our website via an ad placed by Google, Google AdWords will set a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies can therefore not be tracked through the website of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users. Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.
Our company does not contain any information from Google by means of which the data subject could be identified.
b. Legal basis of the processing
We process users' personal data only in compliance with the relevant data protection regulations. This means that the users' data is only processed if a legal permission exists. The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
c. Data categories
IP address
d. Recipients
Employees of the marketing and sales departments as well as Google as order processor
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they are deleted unless there are legal retention obligations to the contrary. These cookies lose their validity after 30 days and are not used for personal identification.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google AdWords.
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with effect for the future. If you do not wish to participate in tracking, you can refuse the setting of a cookie required for this - for example, by means of a browser setting that generally deactivates the automatic setting of cookies or by setting your browser so that cookies from the domain "googleleadservices.com" are blocked.
Please note that you may not delete the opt-out cookies as long as you do not want any measurement data to be recorded. If you have deleted all your cookies in the browser, you must set the respective opt-out cookie again.
i. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling when using Google AdWords.
Google Remarketing
a. Nature and purpose of the processing
This website uses the remarketing function of Google Inc. The operator of the Google Remarketing services is Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they visit websites that belong to Google's advertising network. On these pages, the visitor may be presented with advertisements that relate to content that the visitor has previously viewed on websites that use Google's remarketing function. Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties. Our company does not contain any information from Google by means of which the data subject could be identified.
b. Legal basis of the processing
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
c. Data categories
IP address, user ID, timestamp, device data, etc.
d. Recipients
Recipients of the data are internal employees of the marketing and IT departments and Google as a processor.
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. After that, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Google processes your data in the USA. To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.
h. Revocation of consent
If you do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
You can revoke your consent to the storage of your personal data at any time with effect for the future.
i. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
Advertising and Marketing Services
a. Nature and purpose of the processing
This website uses the remarketing function of Google Inc. The operator of the Google Remarketing services is Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. The function is used to present interest-based advertisements to website visitors within the Google advertising network. A so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when they visit websites that belong to Google's advertising network. On these pages, the visitor may be presented with advertisements that relate to content that the visitor has previously viewed on websites that use Google's remarketing function. Each time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties. Our company does not contain any information from Google by means of which the data subject could be identified.
b. Legal basis of the processing
The legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
c. Data categories
IP address, user ID, timestamp, device data, etc.
d. Recipients
Recipients of the data are internal employees of the marketing and IT departments and Google as a processor.
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been given. After that, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
g. Third country transfer
Google processes your data in the USA. To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.
h. Revocation of consent
If you do not wish to use Google's remarketing function, you can generally deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.
You can revoke your consent to the storage of your personal data at any time with effect for the future.
i. Automated decision making and profiling
As a responsible company, we do not use automated decision-making or profiling for this data processing.
Facebook Messenger
a. Description and scope of data processing
You can contact us via Facebook Messenger. This is an offer of Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland. By installing and using the messenger on your smartphone, you agree to the terms and conditions of Meta Platforms Ireland Ltd. Unfortunately, we have no influence on these or on the privacy policy of Meta Platforms Ireland Ltd. You can find more information as well as the privacy policy of Facebook here: https://www.facebook.com/about/privacy/ If you contact us via Facebook Messenger, the data will be used exclusively for processing the conversation. In this context, the data will not be passed on to third parties. The data will not be used for advertising purposes.
b. The following data will be processed:
The ID of your Facebook profile
Your Facebook username
Your first and last name
If applicable, your e-mail address
c. Legal basis for data processing
The legal basis for the processing of data is Art. 6 para. 1 lit. a GDPRif the user has given his consent. The legal basis for the processing of data transmitted in the course of sending a request is Art. 6 (1) lit. f GDPR.
d. Purpose of the data processing
The processing of personal data from Facebook Messenger serves us solely to process the contact.
e. Duration of storage, possibility of revocation and removal.
You have the option to revoke your consent to the processing of personal data at any time. If you contact us, you can object to the storage of personal data at any time. In such a case, the conversation cannot be continued. All personal data stored by us in the course of contacting you will be deleted in this case. We have no influence on the deletion of data at Meta Platforms Ireland Ltd.
BytePlant
a. Nature and purpose of processing
The data you provide in the context of an order may be used to verify whether there is an atypical order transaction (e.g. simultaneous ordering of a large number of goods to the same address using different customer accounts). In principle, we have a legitimate interest in carrying out such a check. The legal basis for the processing is Art. 6(1)(f) GDPR. To prevent fraud, we use the services of BytePlant GmbH Software Solutions & Consulting, Heilsbronner Strasse 4, D-91564 Neuendettelsau (hereinafter "BytePlant") to operate our website. BytePlant collects and processes data with the help of cookies and other tracking technologies to determine the terminal device used by the user and other data about the use of the website. An assignment to a specific user does not take place. To the extent that IP addresses are collected by BytePlant, they are immediately encrypted. The data is stored by BytePlant in a fraud prevention database. The database also stores data transmitted by us to BytePlant on end devices that have already been used for (attempted) fraud. In this respect, too, there is no allocation to specific users. In the course of an order process on our website, we retrieve a risk assessment of the user's terminal device from the BytePlant database. This risk assessment on the probability of a fraud attempt takes into account, among other things, whether the terminal device has dialed in via different service providers, whether the terminal device has a frequently changing geo-reference, how many transactions have been made via the terminal device and whether a proxy connection is used. The legal basis for the processing is Art. 6(1)(f) GDPR.
b. Legal basis of the processing
The processing of the transmitted data is based on our legitimate interests to prevent fraud (Art. 6(1)(f) GDPR).
c. Data categories
Past addresses, email addresses, telephone numbers.
d. Recipients
Recipients of the data are internal employees of IT and BytePlant as order processor. For this purpose, we have concluded the corresponding order processing agreement with BytePlant.
e. Storage periods
Data is only processed for 14 days in this context. After that, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
In principle, a data subject cannot make use of any right to object to the processing of personal data in connection with fraud prevention.
g. Third country transfer
Processing takes place exclusively in the European Union (EU) or the European Economic Area (EEA).
h. Profiling
No profiling takes place.
Trustpilot
We use the rating portal Trustpilot, which is operated by TrustPilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark. Trustpilot offers users the opportunity to rate our services, for which they are asked for their consent. Once you have given your consent, you will receive a rating request with a link to a rating page. For this purpose, your surname, first name, email address and order number (reference number) are transmitted to Trustpilot for clear assignment. This data is neither used Trustpilot itself nor passed on to third parties. The submission of the rating is voluntary.
The legal basis for processing the user's data as part of the rating process is consent pursuant to Art. 6 para. 1 lit. a. GDPR.
In order to submit a rating, it is necessary to open a customer account with Trustpilot. In this case, the data protection provisions and general terms and conditions of Trustpilot apply. These can be viewed under the following link:
In addition, the Trustpilot widget is integrated on our website. This gives you a first impression of the quality of our products and displays a selection of reviews from our customers and the overall score formed from all reviews. The voluntary reviews are published, under a clear name or under self-selected pseudonyms. A widget is a function and content element integrated within our online offer that displays variable information. The corresponding content is retrieved from the servers of Trustpilot. This is the only way to always display the current rating. For this purpose, a data connection is established from the website accessed within our online offer to Trustpilot and Trustpilot receives certain technical data (access data, including the IP address), which are necessary so that the content can be delivered. Furthermore, Trustpilot receives information that users have visited our online offer. This information may be stored in a cookie and used by Trustpilot to identify which online offers participating in the Trustpilot rating process have been visited by the user. The information may be stored in a user profile on Trustpilot and used for advertising or market research purposes.
If we ask users to consent to the processing of their data through the use of cookies, the legal basis for the processing is Art. 6 para. 1 lit. a. GDPR. Insofar as the processing of the user's data in the context of the integration of the widget is concerned, the legal basis is our legitimate interest in informing our users about the quality of our services pursuant to Art. 6 para. 1 lit. f. GDPR.
For more information about the processing of your data by Trustpilot, as well as about your rights to object and other data subject rights, please see Trustpilot's privacy policy:
http://en.legal.trustpilot.com/end-user-privacy-terms
Chatfast.io
We use the widget from Chatfast.io.
When using the chatbot, a connection is established to the servers of Chatfast.io. The company assures that no personal data is used for purposes other than those listed in the privacy policy and the general terms and conditions. Personal data includes, depending on the voluntary input, name, e-mail address as well as telephone number.
The legal basis for the transmission and processing of the data is based on the consent of the user (Art. 6 para. 1 lit. a GDPR). When ChatFast.io processes data, user data may be transferred and processed outside the European Economic Area (EEA), in particular the USA. In order to establish an appropriate level of data protection, we have concluded the EU standard contractual clauses with the provider.
For more information on data use, please see Chatfast's privacy policy at https://www.chatfast.io/privacy-policy and the general terms and conditions at https://www.chatfast.io/terms-of-use.
Matomo Analytics
This website uses Matomo, a web analytics service. Matomo is software developed by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo is used as an on-premise solution and is operated in compliance with the GDPR. Matomo uses “cookies,” which are text files stored on your computer. These cookies help us track your actions on this website, assisting us in continuously improving it. The information is stored on a server managed by us, located within the European Union. IP anonymization is enabled, and your IP address is shortened. The generated information about website usage is not shared with third parties. You can prevent cookies from being installed by adjusting your browser settings; however, please note that doing so may limit the full functionality of this website. You can object to the storage and use of your data at any time with a single click. In this case, an opt-out cookie will be stored in your browser, meaning Matomo will not collect session data. Important: If you delete your cookies, the opt-out cookie will also be deleted and must be reactivated. Below, you can check your current settings for this website. You can object to the storage of data at any time. If the checkbox is selected, data about your visit will be stored in Matomo. You can uncheck the box to prevent further recordings.
Matomo Opt-Out
CRIF Ident Check
We use CRIF Ident Check (CRIF AG, Hagenholzstrasse 81, 8050 Zurich, Switzerland) to carry out identity checks. As part of this process, personal data (name and address) provided during registration or contract processing is checked against external databases to ensure it matches. The identity check is carried out on the basis of Art. 6 (1) (b) GDPR (for the fulfilment of pre-contractual measures) and Art. 6 (1) (f) GDPR (prevention of fraud and abuse). The results of the check help us to detect identity fraud at an early stage and to protect our system and our users. Further information on data processing by CRIF AG can be found at www.crif.ch/datenschutz.
*Usenet service provider founding date
Copyright © 2025 freediscussions.com – All rights reserved.