Informativa privacy e cookie policy
Versione 1.0
Quellenhof Lazise s.r.l. con sede legale in Via del Terminon 19, 37017 Lazise, Verona, Italia, di Quellenhof Luxury Resort Lazise si impegna costantemente per tutelare la privacy on-line dei suoi utenti. Questo documento è stato redatto ai sensi dell’art. 13 del Regolamento UE 2016/679 (di seguito: "Regolamento") al fine di permetterle di conoscere la nostra politica sulla privacy, per capire come le sue informazioni personali vengono gestite quando utilizza il nostro sito web (di seguito “Sito”) e, se del caso, di prestare un consenso al trattamento dei Suoi dati personali in modo espresso e consapevole. (validamente prestato solo da persone maggiori di anni 16). Le informazioni ed i dati da Lei forniti od altrimenti acquisiti nell'ambito dell’utilizzo dei nostri servizi sul sito - di seguito " Servizi"-, saranno oggetto di trattamento nel rispetto delle disposizioni del Regolamento e degli obblighi di riservatezza che ispirano l'attività del titolare.
Secondo le norme del Regolamento, i trattamenti effettuati da Quellenhof Luxury Resort Lazise saranno improntati ai principi di liceità, correttezza, trasparenza, limitazione delle finalità e della conservazione, minimizzazione dei dati, esattezza, integrità e riservatezza.
INDICE
1. Titolare del trattamento2. I dati personali oggetto di trattamento
- Dati di navigazione
- Speciali categorie di dati personali
- Dati forniti volontariamente dall’interessato
3. Finalità del trattamento
4. Base legale e natura obbligatoria o facoltativa del trattamento
5. Destinatari dei dati personali
6. Trasferimenti dei dati personali
7. Conservazione dei dati personali
8. Diritti dell’interessato
9. Modifiche
1. Titolare del trattamento
Il titolare dei trattamenti svolti attraverso il Sito è Quellenhof Lazise s.r.l. come sopra definito. Per qualunque informazione inerente al trattamento dei dati personali da parte del titolare, tra cui l’elenco dei responsabili del trattamento che trattano dati, può scrivere al seguente indirizzo: info@quellenhof-lazise.it
2. I dati personali oggetto del trattamento
A seguito della navigazione del Sito, la informiamo che il titolare tratterà dati personali che potranno essere costituiti da un identificativo come il nome, un numero di identificazione, un identificativo online, un indirizzo postale, un indirizzo di posta elettronica, un numero di telefono (fisso e/o mobile) o a uno o più elementi caratteristici della tua identità fisica, fisiologica, psichica, economica, culturale o sociale idonea a rendere il soggetto interessato identificato o identificabile (di seguito solo “Dati Personali”).
I Dati Personali trattati attraverso il Sito sono i seguenti:
a. Dati di navigazione
I sistemi informatici e le procedure software preposte al funzionamento del Sito acquisiscono, nel corso del loro normale esercizio, alcuni Dati Personali la cui trasmissione è implicita nell'uso dei protocolli di comunicazione di Internet. Si tratta di informazioni che non sono raccolte per essere associate a interessati identificati, ma che per loro stessa natura potrebbero, attraverso elaborazioni ed associazioni con dati detenuti da terzi, permettere di identificare gli utenti. In questa categoria di dati rientrano gli indirizzi IP o i nomi a dominio dei computer utilizzati dagli utenti che si connettono al Sito, gli indirizzi in notazione URI (Uniform Resource Identifier) delle risorse richieste, l'orario della richiesta, il metodo utilizzato nel sottoporre la richiesta al server, la dimensione del file ottenuto in risposta, il codice numerico indicante lo stato della risposta data dal server (buon fine, errore, etc.) ed altri parametri relativi al sistema operativo e all'ambiente informatico dell'utente. Questi dati vengono utilizzati al solo fine di ricavare informazioni statistiche anonime sull'uso del Sito e per controllarne il corretto funzionamento, per identificare anomalie e/o abusi, e vengono cancellati immediatamente dopo l'elaborazione. I dati potrebbero essere utilizzati per l'accertamento di responsabilità in caso di ipotetici reati informatici ai danni del sito o di terzi: salva questa eventualità, allo stato i dati raccolti dal sito vengono rimossi entro un breve arco di tempo.
b. Speciali categorie di dati personali
Nell'utilizzo del nostro Sito (o invio tramite e-mail) per una Sua candidatura, potrebbe verificarsi un conferimento di suoi Dati Personali rientranti nel novero delle speciali categorie di Dati Personali di cui all’art. 9 del Regolamento, testualmente i “[…] dati personali che rivelino l'origine razziale o etnica, le opinioni politiche, le convinzioni religiose o filosofiche, o l'appartenenza sindacale, nonché […] dati genetici, dati biometrici intesi a identificare in modo univoco una persona fisica, dati relativi alla salute o alla vita sessuale o all'orientamento sessuale della persona”. La invitiamo a non pubblicare tali dati se non strettamente necessario. Invero, le ricordiamo che a fronte della trasmissione di speciali categorie di Dati Personali, ma in assenza di specifica manifestazione del consenso a trattare tali dati (eventualità che comunque Le consente ovviamente di inviare un curriculum vitae), il titolare non potrà essere ritenuto responsabile a nessun titolo, né potrà ricevere contestazioni di sorta, poiché in tal caso il trattamento sarà consentito in quanto avente ad oggetto dati resi manifestamente pubblici dall'interessato, in conformità con l’art. 9(1)(e) del Regolamento. Specifichiamo comunque l'importanza, come sopra già segnalato, di manifestare l’esplicito consenso al trattamento delle speciali categorie di Dati Personali, laddove decidesse di condividere tali informazioni.
La informiamo inoltre che, ai fini della selezione, il titolare potrebbe analizzare i profili social a carattere professionale resi liberamente disponibili su Internet (es. LinkedIn).
c. Dati forniti volontariamente dall’interessato
Nell'utilizzo di alcuni Servizi del Sito (ad esempio il modulo di richiesta/contatto/prenotazione) potrebbe verificarsi un trattamento di Dati Personali di terzi soggetti da Lei inviati al titolare. Rispetto a tali ipotesi, lei si pone come autonomo titolare del trattamento, assumendosi tutti gli obblighi e le responsabilità di legge. In tal senso, conferisce sul punto la più ampia manleva rispetto ad ogni contestazione, pretesa, richiesta di risarcimento del danno da trattamento, ecc. che dovesse pervenire al titolare da terzi soggetti i cui Dati Personali siano stati trattati attraverso il suo utilizzo delle funzioni del Sito in violazione delle norme sulla tutela dei dati personali applicabili. In ogni caso, qualora fornisse o in altro modo trattasse Dati Personali di terzi nell'utilizzo del Sito, garantisce fin da ora - assumendosene ogni connessa responsabilità - che tale particolare ipotesi di trattamento si fonda su un’idonea base giuridica ai sensi dell’art. 6 del Regolamento che legittima il trattamento delle informazioni in questione.
3. Finalità del trattamento
Il trattamento che intendiamo effettuare, dietro suo specifico consenso, ove necessario, ha le seguenti finalità:
a. consentire l'erogazione dei Servizi da lei richiesti;
b. rispondere a richieste di assistenza, informazioni o di prenotazioni;
c. analizzare i CV e ricontattare i candidati che hanno trasmesso la loro candidatura;
d. assolvere eventuali obblighi di legge, contabili e fiscali.
e. finalità di marketing: i dati conferiti potranno essere trattati, previo esplicito e specifico consenso, per l’invio di comunicazioni promozionali e di marketing, incluso l’invio di newsletter e ricerche di mercato, attraverso strumenti automatizzati (sms, mms, e-mail, notifiche push) e non (posta cartacea, telefono con operatore). La base giuridica del trattamento dei Suoi dati per tali finalità è l’art. 6, comma 1, lett. a) del Regolamento. Il trattamento di marketing diretto è facoltativo e dipende dalla Sua libera scelta; pertanto il mancato conferimento del Suo consenso per tale finalità non pregiudicherà la fruizione dei servizi.
4. Base giuridica e natura obbligatoria o facoltativa del trattamento
La base giuridica del trattamento di Dati Personali per le finalità di cui alla sezione 3 (a-b-c) è l’art. 6(1)(b) del Regolamento (esecuzione di un contratto) in quanto i trattamenti sono necessari all'erogazione dei Servizi o per il riscontro di richieste dell’interessato. Il conferimento dei Dati Personali per queste finalità è facoltativo ma l'eventuale mancato conferimento comporterebbe l'impossibilità di attivare i Servizi forniti dal Sito, riscontrare richieste o valutare i CV. Con specifico riferimento alla finalità 3.c e alla connessa analisi dei profili social a carattere professionale resi liberamente disponibili su Internet di cui alla sezione 2.b, la base legale del trattamento è l’art. 6(1)(f) del Regolamento, ossia il legittimo interesse del titolare a verificare eventuali rischi sull’idoneità del candidato a ricoprire la specifica posizione aperta.
La finalità di cui alla sezione 3.d rappresenta un trattamento legittimo di Dati Personali ai sensi dell’art. 6(1)(c) del Regolamento (adempiere un obbligo legale). Una volta conferiti i Dati Personali, il trattamento è invero necessario per adempiere ad un obbligo di legge a cui il titolare è soggetto.
La base giuridica del trattamento per le finalità di cui alla sezione 3.e è l’art. 6(1)(a) del Regolamento (consenso dell’utente). Per i trattamenti effettuati per le medesime finalità che comportano l’invio diretto di proprio materiale pubblicitario o di propria vendita diretta o per il compimento di proprie ricerche di mercato o di comunicazioni commerciali in relazione a prodotti o servizi del titolare analoghi a quelli da lei acquistati, il Titolare può utilizzare, senza il suo consenso, gli indirizzi di posta elettronica e di posta cartacea, ai sensi e nei limiti consentiti dall’art. 130, comma 4 del Codice e dal provvedimento dell’Autorità Garante per la protezione dei dati personali del 19 giugno 2008. La base giuridica del trattamento dei suoi dati per tale finalità è l’art. 6(1)(f) del Regolamento (l’interesse legittimo).
5. Destinatari dei dati personali
I suoi Dati Personali potranno essere condivisi, per le finalità di cui alla sezione 3 più sopra, con:
a. soggetti che agiscono tipicamente in qualità di responsabili del trattamento ossia: i) persone, società o studi professionali che prestano attività di assistenza e consulenza al titolare in materia contabile, amministrativa, legale, tributaria, finanziaria, di recupero crediti, marketing e comunicazione relativamente alla erogazione dei Servizi; ii) soggetti con i quali sia necessario interagire per l'erogazione dei Servizi (ad esempio gli hosting provider) iii) ovvero soggetti delegati a svolgere attività di manutenzione tecnica (inclusa la manutenzione degli apparati di rete e delle reti di comunicazione elettronica); (collettivamente “Destinatari”);
b. soggetti, enti od autorità a cui sia obbligatorio comunicare i suoi dati personali in forza di disposizioni di legge o di ordini delle autorità;
c. persone autorizzate dal titolare al trattamento di Dati Personali necessario a svolgere attività strettamente correlate all'erogazione dei Servizi o alle altre finalità di cui sopra alla sezione 3, che si siano impegnate alla riservatezza o abbiano un adeguato obbligo legale di riservatezza (es. i dipendenti del titolare).
6. Trasferimenti dei dati personali
Alcuni dei tuoi Dati Personali sono condivisi con Destinatari che si potrebbero trovare al di fuori dello Spazio Economico Europeo. Il titolare assicura che il trattamento dei suoi Dati Personali da parte di questi Destinatari avviene nel rispetto del Regolamento. Invero, i trasferimenti si possono basare su una decisione di adeguatezza, sulle Standard Contractual Clauses approvate dalla Commissione Europea o su un’altra idonea base giuridica. Maggiori informazioni sono disponibili presso il titolare scrivendo al seguente indirizzo: info@quellenhof-lazise.it
7. Conservazione dei dati
I Dati Personali trattati per le finalità di cui alla sezione 3(a-b) saranno conservati per il tempo strettamente necessario a raggiungere quelle stesse finalità. In ogni caso, trattandosi di trattamenti svolti per la fornitura di Servizi, il titolare tratterà i Dati Personali fino al tempo permesso dalla normativa Italiana a tutela dei propri interessi (Art. 2946 c.c. e ss.). Per quanto riguarda i CV trasmessi attraverso il Sito o tramite e-mail di cui alla sezione 3.c, i Dati Personali saranno conservati per un periodo ritenuto congruo rispetto alla finalità per cui il dato viene acquisito. È fatta salva la possibilità per il titolare di ricontattare il candidato poco prima della scadenza indicata per richiedere un’estensione di tale periodo di conservazione.
I Dati Personali trattati per le finalità di cui alla sezione 3.d saranno conservati fino al tempo previsto dallo specifico obbligo o norma di legge applicabile.
I Dati Personali trattati per le finalità di cui alla sezione 3.e saranno invece conservati fino alla revoca del consenso da parte dell’interessato, ovvero, in mancanza di tale revoca, per un tempo massimo ritenuto congruo.
Maggiori informazioni in merito al periodo di conservazione dei dati ed ai criteri utilizzati per determinare tale periodo possono essere richieste scrivendo al titolare al seguente indirizzo: info@quellenhof-lazise.it
8. Diritti degli interessati
Ai sensi degli articoli 15 e seguenti del Regolamento, ha il diritto di chiedere al titolare, in qualunque momento, l'accesso ai tuoi Dati Personali, la rettifica o la cancellazione degli stessi o di opporti al loro trattamento, ha diritto di richiedere la limitazione del trattamento nei casi previsti dall'art. 18 del Regolamento, nonché di ottenere in un formato strutturato, di uso comune e leggibile da dispositivo automatico i dati che la riguardano, nei casi previsti dall'art. 20 del Regolamento.
Le richieste vanno rivolte per iscritto al titolare al seguente indirizzo: info@quellenhof-lazise.it
In ogni caso Lei ha sempre diritto di proporre reclamo all'Autorità di Controllo competente (Garante per la Protezione dei Dati Personali), ai sensi dell'art. 77 del Regolamento, qualora ritenga che il trattamento dei tuoi Dati Personali sia contrario alla normativa in vigore.
9. Modifiche
La presente privacy policy è in vigore dal 07.06.2018. Il titolare si riserva di modificarne o semplicemente aggiornarne il contenuto, in parte o completamente, anche a causa di variazioni della normativa applicabile. Il contenuto del sito e della presente privacy policy potrebbero essere soggetti a variazioni, pertanto il Titolare la invita a visitare con regolarità questa sezione per prendere cognizione della più recente ed aggiornata versione della privacy policy in modo da essere sempre aggiornato sui dati raccolti e sull’uso che ne viene fatto.
Privacy Policy
An overview of data protection
General
The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified. Detailed information on the subject of data protection can be found in our privacy policy found below.
Data collection on our website
Who is responsible for the data collection on this website?
The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.
How do we collect your data?
Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form.
Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site.
What rights do you have regarding your data?
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
Analytics and third-party tools
When visiting our website, statistical analyses may be made of your surfing behavior. This happens primarily using cookies and analytics. The analysis of your surfing behavior is usually anonymous, i.e. we will not be able to identify you from this data. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.
You can object to this analysis. We will inform you below about how to exercise your options in this regard.
General information and mandatory information
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
If you use this website, various pieces of personal data will be collected. Personal information is any data with which you could be personally identified. This privacy policy explains what information we collect and what we use it for. It also explains how and for what purpose this happens.
Please note that data transmitted via the internet (e.g. via email communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Notice concerning the party responsible for this website
The party responsible for processing data on this website is:
Quellenhof Lazise GmbH
Via del Terminon 19
37017 Lazise (VR)
Telephone: + 39 0458 531000
Email: info@quellenhof-lazise.it
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).
Revocation of your consent to the processing of your data
Many data processing operations are only possible with your express consent. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
Right to file complaints with regulatory authorities
If there has been a breach of data protection legislation, the person affected may file a complaint with the competent regulatory authorities. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data which we process based on your consent or in fulfillment of a contract automatically delivered to yourself or to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible party, this will only be done to the extent technically feasible.
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.
If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Information, blocking, deletion
As permitted by law, you have the right to be provided at any time with information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed. You also have the right to have this data corrected, blocked or deleted. You can contact us at any time using the address given in our legal notice if you have further questions on the topic of personal data.
Opposition to promotional emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
Data protection officer
Statutory data protection officer
We have appointed a data protection officer for our company.
Heinrich Dorfer
Quellenhof GmbH
Pseirerstraße 47
39010 St Martin/Passeier
Italien
Telephone: +
Email: info@quellenhof.it
Data collection on our website
Cookies
Some of our web pages use cookies. Cookies do not harm your computer and do not contain any viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain in your device's memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
You can configure your browser to inform you about the use of cookies so that you can decide on a case-by-case basis whether to accept or reject a cookie. Alternatively, your browser can be configured to automatically accept cookies under certain conditions or to always reject them, or to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies which are necessary to allow electronic communications or to provide certain functions you wish to use (such as the shopping cart) are stored pursuant to Art. 6 paragraph 1, letter f of DSGVO. The website operator has a legitimate interest in the storage of cookies to ensure an optimized service provided free of technical errors. If other cookies (such as those used to analyze your surfing behavior) are also stored, they will be treated separately in this privacy policy.
Server log files
The website provider automatically collects and stores information that your browser automatically transmits to us in "server log files". These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data will not be combined with data from other sources.
The basis for data processing is Art. 6 (1) (f) DSGVO, which allows the processing of data to fulfill a contract or for measures preliminary to a contract.
Contact form
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.
We will, therefore, process any data you enter onto the contact form only with your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.
vioma BOOKING - Online bookings and booking requests
Our website uses the booking technology vioma BOOKING, provided by vioma GmbH ("vioma"), Industriestraße 27, 77656 Offenburg, Germany.
If you make an online booking or a booking enquiry via our website, we require your e-mail address, your travel dates, the product booked and your title as well as first and last names for processing. In individual cases, your telephone number will also be requested in order to be able to contact you quickly, particularly in relation to unforeseeable circumstances that affect your booking.
For the calculation of the valid travel price, the dates of stay, the selected product, the number of persons travelling and whether the persons are adults or children are required. If you are travelling with children, the age of the children is also requested for the correct calculation of the travel price. Furthermore, we ask for the desired means of payment for the trip. If a prepayment is applicable for your travel parameters, you will be forwarded to a payment service provider for the secure processing of the prepayment after selecting the desired means of payment. Further information in the form is provided on a voluntary basis.
The processing of your data for the online booking and the online booking request is based on Art. 6 para. 1 lit. b GDPR and serves the fulfilment of a contract or the implementation of pre-contractual measures.
The data you transmit to us will remain with us until the purpose for storing the data no longer applies (e.g. after processing your request has been completed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Execution of a data processing agreement
In order to ensure data protection-compliant processing, we have concluded an order processing contract with vioma.
vioma OFFER (“ReGuest”)
Our website uses the Messenger and the offer management software vioma OFFER (“ReGuest”), provided by vioma GmbH ("vioma"), Industriestrasse 27, 77656 Offenburg, Germany, for the generation and administration of offers and for online consultation on offers.
If you make an online inquiry via our website or ask questions using our Messenger, we need your contact data, your travel data, and the product you are interested in, as well as any additional data about your desired stay and, if applicable, your payment data in order to process your request and create your individual offer.
For the calculation of the valid travel price, the dates of stay, the selected product, the number of persons traveling and whether the persons are adults or children are required. If you are traveling with children, the age of the children is also requested for the correct calculation of the travel price.
The processing of your data for the preparation of an offer is based on Art. 6 para. 1 lit. b GDPR and serves the fulfillment of a contract or the implementation of pre-contractual measures.
Execution of a data processing agreement
In order to guarantee processing in compliance with data protection regulations, we have concluded a data processing agreement with vioma.
Registration on this website
You can register on our website in order to access additional functions offered here. The input data will only be used for the purpose of using the respective site or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject your registration.
To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration.
We will process the data provided during registration only based on your consent per Art. 6 (1)(a) DSGVO. You may revoke your consent at any time with future effect. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.
Cookie consent
Our website uses the cookie consent technology of vioma GmbH to obtain your consent to the storage of certain cookies in your browser and to document this in accordance with data protection regulations. The provider of this technology is vioma GmbH ("vioma"), Industriestraße 27, 77656 Offenburg, Germany. When you enter our website, a vioma cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data will not be passed on to us.
Revocation of your consent
The consent you have given in the cookie consent dialogue to the storage of certain cookies, or the revocation of this consent, can be revoked at any time with effect for the future. If you would like to change your selection in the cookie consent dialogue, please click here. Once you have clicked on the link, the cookie consent dialogue will reappear and you can change your selection. Alternatively, you can ask us to delete it or delete the vioma consent cookie yourself in your browser. From this point on, we no longer process your data. The logging of your consent/non-consent is based on a legal obligation in accordance with § 76 Federal Data Protection Act (BDSG), Art. 6 para. 1 sentence 1 lit. c GDPR. Mandatory legal retention periods remain unaffected.
Conclusion of a contract on commissioned processing
In order to ensure data protection-compliant processing, we have concluded an order processing contract with vioma.
Analytics and advertising
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data may be summarised by Google in a profile that is assigned to the respective user or their end device.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The data processing by this analysis tool is based on your consent, Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
IP anonymization
We have activated the IP anonymisation function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Demographic characteristics with Google Analytics
This website uses the "demographic characteristics" function of Google Analytics in order to be able to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item "Browser Plugin".
Google Analytics e-commerce tracking
This website uses the "e-commerce tracking" function of Google Analytics. With the help of e-commerce tracking, the website operator can analyse the purchasing behaviour of website visitors in order to improve his online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing to purchasing a product is recorded. This data can be summarised by Google under a transaction ID, which is assigned to the respective user or their device.
Storage duration
Data stored by Google at user and event level that is linked to cookies, user identifiers (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. For details, please see the following link: https://support.google.com/analytics/answer/7667196?hl=en.
Conclusion of an order processing contract
We have concluded an order processing contract with Google and implement the requirements of the German data protection authorities when using Google Analytics.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.
The use of Google Tag Manager is based on your consent Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.
Google Remarketing
This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyzes your user patterns on our website (e.g. clicks on specific products), to allocate a certain advertising target groups to you and to subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting).
Moreover, it is possible to link the advertising target groups generated with Google Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner 11 / 17 tailored to you as well as on any of your devices (e.g. tablet or PC).
If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.
The use of Google Remarketing is based on your consent Art. 6 para. 1 lit. a GDPR; the given consent may be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.
Facebook Pixel
To measure conversion rates, this website uses the visitor activity pixel of Facebook. The provider of this service is Facebook Ireland Limited (“Facebook”), 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too.
This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns.
For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy (https://www.facebook.com/policy.php). This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data.
The use of Facebook Pixel is based on your consent, Art. 6 para. 1 lit. a GDPR; the given consent may be revoked at any time.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/.
You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook.
If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: https://www.youronlinechoices.com/uk/your-ad-choices.
vioma TAO
This website uses the functions of the web analysis service vioma TAO. The provider of vioma TAO is vioma GmbH ("vioma"), Industriestr. 27, 77656 Offenburg, Germany.
vioma TAO uses so-called "cookies". These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is transmitted to a vioma server in Germany and stored there.
Purpose of processing and type of data processed
The purpose of the component is the analysis of visitor flows on the operator's website. vioma TAO uses the collected data and information, among other things, to evaluate the use of the website in order to compile online reports, which show the activities on the website, and to provide other services related to the use of the website.
In the course of this technical process, vioma obtains knowledge of personal data, such as the IP address of the person concerned, which vioma uses, among other things, to trace the origin of visitors and clicks. By using cookies, personal information, such as the time of access, the location from which access originated, and the frequency of visits to the website by the person concerned, is stored. Each time the internet pages are visited, this personal data, including the IP address of the internet connection used by the person concerned, is transmitted to vioma in Germany. This personal data is stored by vioma.
Transfer to third parties
vioma does not pass on this personal data collected via this technical process to third parties.
Storage
The storage of vioma TAO cookies and the use of this analysis tool are based on EU GDPR Art. 6 (1) lit. f. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both his website and his advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively based on EU GDPR Art. 6 (1) lit. f. Consent can be revoked at any time.
Storage period
We process the data as long as necessary for the respective purpose. Inasmuch as legal obligations to retain data exist - e.g. in commercial or tax law - the personal data concerned will be stored for the duration of the obligation to retain data. After expiry of the obligation to retain data, we will check whether there is any further need for processing. If a necessity no longer exists, the data will be deleted.
What rights do you have regarding your data?
Of course, you can request information about the data stored by us about your person at any time and, in the event that it is no longer necessary, you can demand that the data be deleted or processing be restricted (see below).
Objection
You can prevent the setting of cookies by TAO, at any time by means of an appropriate setting of the internet browser used. Such a browser setting would prevent vioma from setting a cookie on the information technology system of the person concerned. Furthermore, a cookie already set by vioma can be deleted at any time via the browser or other software programs.
More information about the handling of user data at vioma can be found in this privacy policy.
Your rights
Information, deletion and correction
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, the right to correction or deletion of this data. For this purpose, as well as for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of erasure.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
If you have lodged an objection pursuant to Art. 21 para 1 GDPR, a balancing of your and our interests must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your explicit consent. You can revoke the consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation
Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21 PARA1 GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 PARA 2 GDPR).
Right of appeal to the competent supervisory authority
In the event of breaches of the GDPR, data subjects have a right of appeal to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged breach. The right of appeal is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done insofar as it is technically feasible.