Source: https://www.aklamio.com/privacy
Timestamp: 2019-04-18 18:24:36+00:00

Document:
Thank you for visiting our website and for your interest in our Services. For aklamio GmbH (hereinafter also referred to as "Aklamio", "we", "us", "our") the protection and confidentiality of your data is very important.
Personal data are all information relating to an identified or identifiable natural person (Art. 4 No. 1 EU General Data Protection Regulation (hereinafter referred to as "GDPR")). This includes information such as your name, e-mail address, postal address or telephone number. Information that is not directly associated with your identity, such as anonymous Internet traffic data (e.g. the number of visits to a website), is not included here.
Please note that use of our Platforms is not intended for or directed at persons under the age of 18. We do not knowingly collect personal information from anyone under the age of 18.
We collect and use personal data only to the extent necessary to provide our Platforms and Services and to ensure their functionality. If the processing of personal data is necessary and such processing is not permitted by a legal basis, we generally obtain the consent of the data subject.
Is the processing of personal data required for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
We process and store personal data of the data subject only for the period necessary to achieve the purpose of storage or insofar as this has been provided for by the European Directive and Regulation Giver or another legislator in laws or regulations to which the controller is subject.
If the storage purpose ceases to apply or if a storage period prescribed by the European Directive and Regulation bodies or another competent legislator expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.
In principle, we only process personal data within our company. If and to the extent that we make use of the Services of third parties to provide our Services, we will only transfer personal data to such third parties to the extent that the transfer is necessary for the corresponding service and to the extent that a legal basis exists for the transfer.
In the event that we outsource certain parts of data processing (so-called "data processing"), we contractually oblige contractors to process personal data only in accordance with the requirements of the GDPR and the applicable national data protection laws and to protect the rights of third parties.
Information on existing data processing relationships is summarized in Section 6 for the sake of clarity.
In the following we will inform you about the various ways in which personal data is processed, its purpose and legal basis, and how long it is stored.
We routinely collect a range of general data and information each time we access our Platforms. This data is stored in the so-called log files of our system. We may record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our Platforms (so-called referrer), (4) the subwebsites which are accessed via an accessing system on our website, (5) the date and time of access to the Website, (6) the Internet Protocol address (IP address) and the Internet service provider of the accessing system, and (8) other similar data and information used for security purposes in the event of attacks on our information technology systems.
For security purposes, in particular to trace the attack in the event of attacks on our Platforms, we store this data including the IP address for a period of seven days and then make the IP addresses anonymous or delete the data. The IP address is required to set up and during the connection to enable the contents of our Platforms to be delivered to you. The legal basis for the processing and subsequent storage of the IP address is a legitimate interest pursuant to Art. 6 para. 1 f GDPR. The legitimate interest with regard to the transmission of the IP address lies in the fact that this is necessary for the display of the contents of the respective Platform; a display of the website is not possible without the transmission of the IP address. The legitimate interest in limited storage is our security interest.
When using this general data and information we do not draw any conclusions about you as a person. Rather, this information is required to (1) correctly deliver the contents of our Platforms, (2) optimize the contents of our Platforms and the advertising for them, (3) ensure the permanent functionality of our information technology systems and the technology of our Platforms, and (4) provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by Aklamio both statistically and with the aim of increasing data protection and data security in our company in order ultimately to ensure an optimal level of protection for the personal data processed by us. The anonymous data of the log files are stored separately from all personal data provided by a person concerned. The data will not be passed on to third parties.
Help buttons are provided to our Platforms, which can be used by our users for electronic contact for information and support purposes. By clicking the "Send" button you consent to the transmission of the data entered in the input mask to us. In addition, we save the date and time of your contact. Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail and our response will be stored.
The personal data voluntarily transmitted to us in this context serve us for the processing of your inquiry and the establishment of contact with you. The legal basis for the transmission of data is Art. 6 para. 1 lit. a GDPR. We store the data for this purpose until the conversation with you is finished. The conversation is terminated when the circumstances indicate that the facts in question have been finally clarified and that there will be no further questions, especially in the future.
We use so-called cookies and similar technologies on our Platforms. For the sake of clarity, the relevant information is summarized in Section 5.
Aklamio offers you various Services with the aim of sharing the added value for our partners created by your recommendations and purchases. If you wish to use our Services, you must register with Aklamio and create an Aklamio account under which we process personal data. In this section we inform you about the purposes, the respective legal basis and the storage period of these processes.
you can manage the email newsletter function and other notification options.
Individual data from your profile, e.g. your photo and your user name, will be displayed to the users of the recommendation link you have shared. The purpose is to personalize your recommendations.
In connection with every use of the Aklamio account, we automatically process the log-in data in order to prevent misuse or fraudulent use of our Services, to defend against attacks on our system and to ensure and verify the proper performance of the contractual Services at any time.
The legal basis for the storage and use of your personal data in connection with your Aklamio account is the fulfilment of your contract with us, art. 6 par. 1 lit. b GDPR. If you provide certain profile details voluntarily, such as the posting of a profile photo, your consent is the legal basis, Art. 6 para. 1 lit. a GDPR.
Google Account ("Google Sign-In"). When you register with Aklamio using the Google Sign-In button, we will have access to your Google email address, the name you provided when you created your Google account, and a profile picture, if applicable.
PayPal account. If you have a PayPal account, you can alternatively register with Aklamio via your PayPal account. In this case, we will have access to your name and email address used to create your PayPal account.
The data transmitted to us by the respective provider will be processed by us in order to create or update an Aklamio account for you and to make it available to you in accordance with Section 4.2.1.
Since we use the data to create an Aklamio account, the legal basis for processing is the contract for an Aklamio account pursuant to Art. 6 para. 1 lit. b GDPR, as described under 4.2.1. Your personal data will be stored with us for the purposes and duration described in Section 4.2.1.
You can register to receive newsletters by confirming your account or by clicking on "E-Mail Settings" in your account. In this case we will use your e-mail address to send you our regular newsletter in which we will inform you about interesting topics. The legal basis is your consent according to art. 6 par. 1 lit. a GDPR.
In connection with your newsletter registration, we also store your IP address and the date and time of registration so that we can trace and prove the registration at a later point in time. The legal basis for this storage is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR, whereby the legitimate interest is the possibility of proof of registration. We store your email address to send you newsletters until you unsubscribe from the newsletter service or until we stop sending you the newsletter.
We also send you information by email about our Services and campaigns that are similar to those you have already used. The legal basis is a legitimate interest within the meaning of Art. 6 Para. 1 S. 1 f GDPR, namely the pursuit of our business interests.
You can stop receiving newsletters or other messages from us at any time by using the appropriate settings in the notification options in your Aklamio account or by using the corresponding opt-out link contained in each email from us.
You can object to receiving advertising at any time. If we receive an objection from you to the use of your data for advertising purposes, we can include your personal contact data (name, e-mail address, address, telephone number, fax number if applicable) in a blacklist, with the help of which we ensure that we no longer send you unwanted advertising.
The legal basis is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. This is to make sure that we can fulfill our obligations from your advertising contradiction. The data will be stored for this purpose until you expressly revoke the advertising objection in writing.
If you make use of our referral or cashback Services, i.e. use our Platforms to make recommendations for Aklamio or for products or online shops of our partner companies or to place orders yourself there in order to receive rewards or cashback, we automatically process various data that is required to collect and process the rewards or cashback.
If you would like to make a recommendation, we will provide you with a personal recommendation link for this purpose, which contains a unique, pseudonymised user ID. The pseudonymous user ID is transmitted to us as soon as a friend or other recipient of the recommendation (hereinafter also referred to as "Referred Friend") follows your recommendation link and enables us to assign the activity of the Referred Friend, e.g. the execution of an order in the recommended shop, to your recommendation. This is necessary to be able to credit your account with any bonus or cashback you may have earned and to show you the history of your referrals in your Aklamio account. To personalize the recommendation, the user of the link will be shown your user name and, if applicable, your profile picture. If you do not wish to do so, you can opt out of posting your name and a photo when you create your profile or remove this information at a later date.
If you use our Cashbar for our referral and cashback Services and have activated them, our Services are also available for you. The above information applies accordingly. The Cashbar will tell you whether a certain website you have visited contains offers eligible for rewards. The URL of this website must be transmitted to us when displaying the Casbhar for technical reasons. Information about other websites is not collected by Cashbar.
If the person you refer makes the purchase via a telephone hotline or the shop of one of our partner companies, he can be asked for your e-mail address in this connection. This will be sent to us for the purpose of associating the bonus with your referral and crediting your Aklamio account as described above.
The legal basis for the processing described above is in all cases art. 6 par. 1 lit. b GDPR, as the data processing is necessary to fulfil your contract with us. The data is stored for the duration described in Section 4.2.1.
Within the framework of our statutory accounting obligations, we may also transmit payment data to our accounting offices and tax advisors. We also store the booking documents on which the payments are based, including the payment data contained therein, for a period of ten years in order to fulfil our statutory retention obligations pursuant to § 257 (1) No. 2 HGB and § 147 AO, whereby the period begins at the end of the calendar year in which the booking document arose. The legal basis for such processing is Art. 6 para. 1 lit. c GDPR, the fulfilment of our legal obligations.
The legal basis for this processing is the fulfilment of your contract with us in accordance with Art. 6 para. 1 letter b GDPR. We store this data until the booking request is completed. This is the case if we can assume under the circumstances that there will be no further inquiries in a certain booking process and that claims will no longer be derived from this.
If you are not yet registered with us as a user and make a purchase in an online shop of one of our partner companies in order to receive cashback, your e-mail address can also be transmitted to us in addition to the aforementioned data. The e-mail address will be processed by us in order to create an Aklamio account for you in accordance with Section 4.2.1 and to credit your cashback. The legal basis is therefore Art. 6 para. 1 lit. b GDPR.
If you are the recipient of a referral made via our Services and make a purchase from one of our partner companies, you may be asked for your e-mail address in this connection if the referrer wishes to share with you or give it to you as a gift. This e-mail address is either collected by us or - if the purchase takes place via a telephone hotline or in a retail store - our company partner and transmitted to us. The e-mail address will be processed by us in order to credit the reward to your account or - if you do not yet have an Aklamio account - to create an Aklamio account in accordance with Section 4.2.1 and to credit the reward. The legal basis is therefore the conclusion or fulfilment of a contract in accordance with Art. 6 para. 1 lit. b GDPR.
IP addresses are stored by us for the purposes and duration described in Section 4.1.1 and then made anonymous. E-mail addresses are stored by us for the duration described in Section 4.2.1.
Our Services are also aimed at companies by making the potential of personal recommendations available to them and thereby generating corresponding added value. In connection with addressing new or existing customers and preparing and executing a contractual relationship, we therefore also process personal data of companies (in this respect, personal data only if the entrepreneur himself is a natural person) (hereinafter also referred to as "Customers") or of employees of companies (hereinafter also referred to as "Customer Employees").
In the following we inform you about the purposes and the respective legal basis of the processing of data of Customers or Customer employees, the duration of the storage of the data as well as the data categories, as far as we do not collect the personal data directly from you as the person concerned. The data will be deleted as soon as they are no longer necessary to achieve the respective purpose. This is the case if there is no longer a contract with you and we no longer intend to enter into a contract with you, if there is no longer a legitimate interest and if we are also no longer obliged to keep documents which may contain personal data.
We process personal data for the purpose of contract initiation, contract administration and execution as well as support in the context of ongoing business relationships, so that we can provide our Customers with the contractual Services and can always guarantee an efficient and profitable use of our Services. If the contractual partner is a natural person, the legal basis is that the processing is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR. If we process personal data of employees of the contractual partner, the legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR, namely the facilitation of our business activities and the promotion of the business activities of the Customer. There is no conflicting interest on the part of the respective data subject because processing by us within the framework of the existing employment relationship with the data subject is already necessary from the point of view of our Customer (New German Feder Data Protction Law ("BDSG-neu")). For this purpose we store personal data for the duration of the contract.
We store booking documents resulting from the business relationship for a period of ten years and business letters, i.e. any message relating to the preparation, execution or cancellation of a transaction, for a period of six years, the period beginning at the end of the calendar year in which the business letter was received or sent or the booking document was created. We thus fulfil our legal obligations to store data in accordance with § 257 Paragraph 1 No. 2 HGB and § 147 AO. The legal basis in this respect is Art. 6 para. 1 lit. c GDPR.
We set up a web interface (hereinafter referred to as "Customer Interface") for our Customers, so that they can optimally use and manage the contractual Services. For this purpose, the Customer or the Customer Employees acting as contact persons will be set up a personal access, which they can use by log-in using an e-mail address provided by the persons concerned and a freely chosen password. In connection with the use of the Customer Interface, we automatically process the log-in data of the customer or the authorized Customer Employees in order to prevent misuse and to ensure and check the proper performance of the contractual Services at any time. Furthermore, we process data in the Customer Interface with regard to the respective contractually agreed or offered Services as well as the data concerning the consumption of these Services and their remuneration.
If the Customer is a natural person, the legal basis for the processing is the fulfilment of a contract, Art. 6 para. 1 lit. b GDPR. Insofar as the processing concerns personal data of Customer Employees, the legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR, namely the conduct of our business activity and that of the customer. There is no conflicting interest on the part of the respective data subject because processing by us within the framework of the existing employment relationship with the data subject is already necessary from the point of view of our customer (§ 26 BDSG-neu). For this purpose we store the data for the duration of our business relationship with the customer.
There is a contact form on our website which can be used by interested parties for the purpose of making electronic contact. By clicking the "Send" button you agree to the transmission of the data entered in the input mask to us. In addition, we store the date and time of your contact. Alternatively, you can contact us via the e-mail address provided. In this case, the personal data transmitted with the e-mail and our response will be stored. The personal data voluntarily transmitted to us in this context serves us to process your inquiry and to contact you. The legal basis for the transmission of data is Art. 6 para. 1 lit. a GDPR. We use the data for this purpose until the conversation with you is finished. We assume that the conversation will be terminated if the circumstances indicate that the request in question has been finally clarified.
We process personal data of our customers as well as other entrepreneurs and companies not in a business relationship with us and, in this context, also of the employees there as contact persons for the purpose of direct advertising, if legally permissible. If we have not collected the contact data used for this purpose directly from the person concerned, we also take this data from public sources, such as the website of the respective company or profiles of the respective company or employees posted on social networks. The legal basis is a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 f GDPR. The legitimate interest lies in the processing for the purpose of direct advertising itself (see recital 47 GDPR). We store the data for this purpose for the duration of our interest in concluding a contract with the company concerned or until an objection has been declared.
You can object to the processing of personal data concerning you for advertising purposes at any time. You can address your objection at any time to the contact data specified in Section 1. If the advertisement is contained in an e-mail, you can also use the opt-out link contained in it.
We process the personal data of the customer or prospective customer or his employees received in connection with a business relationship or an inquiry of an interested party even after the end of the business relationship or if such a relationship does not come about for the purpose of being able to recommend suitable Services on the basis of the previous inquiries or business relationships to our customers or interested parties in the event of a renewed interest in our Services. The legal basis is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR, the performance of our business activities. In this respect, we store personal data for the duration in which we can expect that the respective customer would like to conclude a further or first contract with us in the future.
This is not possible if the customer in question indicates that he will under no circumstances ever enter into a business relationship with us.
We also use the data collected from our registered users when using our Platforms for statistical analyses in order to make our Platforms more user-friendly and in particular to improve our Services. For this purpose, we use a pseudonymized user ID as well as non-personal, anonymous data that cannot be related to a person by itself or in combination with one another, e.g. in relation to the usage behavior on our Platforms or in relation to websites from which the person concerned has accessed our Platforms. For these purposes we also process the IP addresses of users in pseudonymised form. With this data alone, a reference to the person concerned can no longer be established.
The anonymous or pseudonymised data will not be combined with personal data about the bearer of the pseudonym without separate express consent and will not be used to personally identify the user of our Platforms.
With deletion of the Aklamio account of the affected user, the data processed for the aforementioned purposes will be made completely anonymous, since the pseudonymous user identification then no longer allows any reference to the affected person.
The legal basis for these processing purposes is a legitimate interest pursuant to Art. 6 para. 1 sentence 1 f GDPR, namely the pursuit of our business purposes, the improvement of our offer and the optimisation of our service quality. No conflicting interest can be identified, as the data is already required for contractual performance and identification is no longer possible after the end of the contract.
We run a Facebook page at https://www.facebook.com/aklamio, https://www.facebook.com/aklamiospain, https://www.facebook.com/aklamiouk and https://www.facebook.com/aklamioitalia. Facebook provides us with anonymous statistical data for these fan pages (so-called "Insights Data"), through which we can obtain information about how visitors to our Facebook pages interact with them. Insights data may be based on personally identifiable information collected in connection with a visit to or interaction of individuals with our Facebook pages and their content. We are jointly responsible with Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland") for this processing of Insights data within the meaning of Art. 26 GDPR and have entered into an agreement with Facebook Ireland to this effect. You can find them at https://www.facebook.com/legal/terms/page_controller_addendum.
The legal basis for the operation of the Facebook pages and the use of the Insights data is a legitimate interest within the meaning of Art. 6 para. 1 f GDPR, namely the interest in an up-to-date and supportive information and interaction opportunity for and with our users and visitors as well as a better understanding of the interests of the visitors of our Facebook pages in order to be able to better address such interests.
Furthermore, we use so-called "tags" or "web beacons" in our Platforms. These are small graphics (usually only 1 x 1 pixel), which are not visibly integrated into the website and with which certain actions of the page visitors can be measured.
In the following, we provide specific information about the cookies and similar technologies we use.
On the one hand, we use technical cookies. These are those that are necessary exclusively to collect some information on our Platforms in order to provide a service requested or desired by you as a user.
The legal basis for these cookies is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, namely the pursuit of our business purposes. As far as you as a user are affected by these technologies, the legal basis is also the fulfilment of your contract with us, art. 6 para. 1 lit. b GDPR.
We use so-called session cookies, which enable a smooth navigation and use of our respective Platform (and for example allow access to the Aklamio account) as well as persistent cookies, which enable you to navigate according to some selected criteria (e.g. selection of the national language in which the contents of our Platforms are displayed) in order to improve your user experience.
Session cookies are deleted after the end of the browser session, i.e. when you close your browser. Other cookies remain on your device for a specified period of time and enable us to recognize your browser the next time you visit. This way, you do not have to make entries and settings that have already been made again.
As part of our recommendation and cashback Services, we also use the conversion tracking technologies of affiliate networks. Affiliate networks are advertising networks that mediate the placement of online advertising for the websites of online shop operators through sales partners (so-called affiliates) and measure the success of advertising. The affiliate networks provide the necessary technical infrastructure for this.
If you as an affiliate follow a recommendation link or as a user a cash back link to one of our partner online shops that is connected to an affiliate network, you will be directed to the relevant shop via the servers of the respective affiliate network. If you subsequently purchase a product or service, the order is recorded by a previously set cookie and a tag of the affiliate network. Only anonymous information about the visit of the respective shop and your order is collected, which is transferred to the servers of the respective affiliate network and stored there. Your IP address will also be made anonymous or deleted immediately. The information will not be used to create profiles and will not be merged with other existing personal data about you. They are transmitted to us for the purpose of being able to assign your order in the shop to the recommendation.
In the following we will inform you about the use of other cookies and similar technologies as well as the respective providers. We will also inform you how you can object to the use of these cookies.
We use the cookies and other technologies listed below and used by us on the basis of Art. 6 Para. 1 lit. f GDPR. With the technologies we use, we want to ensure that our Platforms are designed to meet the needs of our customers and are continually optimized. On the other hand, we use the technologies for advertising purposes in order to statistically record the use of our website and for the purpose of optimising our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
For the purpose of the demand-oriented design and continuous optimization of our Platforms we use Google Analytics, a web analysis service of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter also referred to as "Google"). In this context, cookies and tags are used to create pseudonymous user profiles. The cookie collects data about your use of the Platforms such as the browser type/version, the operating system used, the referrer URL (the previously visited page), the IP address of the accessing computer and the time of the server request and transfers it to a Google server in the USA and stores it there.
The data is used to evaluate the use of our Platforms, to compile reports on the Platform activities and to provide further Services for the purpose of tailoring our offering to meet requirements. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of the company.
Under no circumstances will your IP address be merged with other data from Google. We only use Google Analytics with IP anonymization enabled. This means that the IP address of Google users within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area will be reduced.
Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
You can prevent the collection of data collected by the cookie and related to your use of the Platforms and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en). Further information on Google's use of data for advertising purposes, options for settings and objections can be found on Google's websites: "Google's use of data when using our partners' websites or apps", "Google's use of data for advertising purposes", "Manage information that Google uses to show you advertising" and "Determine which advertising Google shows you".
On our Platforms, we use advertising technologies based on the use of previously visited pages of our Platforms or other websites. This enables us to target visitors to our Platforms with personalized, interest-based advertising. The sites on which we advertise include the Google Display Network, Facebook, LinkedIn and Xing social networks. To perform the analysis of website usage, which forms the basis for displaying interest-based advertising, we use tags that are integrated into the website. These tags are used to store or read a cookie from the advertising network on the user's device. If you subsequently visit another website of the aforementioned networks, you will see advertisements that are most likely related to previously accessed areas of our Platforms.
These cookies record which websites you have visited and which offers you have clicked, technical information about the browser and operating system, referring websites as well as the visit time. With the exception of the IP address, which is immediately anonymized, no data will be processed by which you can be personally identified. The data is processed pseudonymously within the framework of this technology, i.e. the relevant data is recorded cookie-related within pseudonymous user profiles; from the perspective of the respective provider, the data is not processed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is.
The information collected by the cookies about the visit of the websites is transferred to the servers of the providers of the respective advertising network and stored there. The information will not be merged with other existing personal data about you. We receive no knowledge of the content of the transmitted data and their use by the advertising networks. We can only select which segments of users (e.g. by age, interests) our advertising should be displayed.
We use Google's "Google Tag Manager" to integrate and manage the described tags in our Platforms.
The legal basis for such processing is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, namely the pursuit of our business purposes, which also includes the targeted advertising of our Services.
We also use the cookies and tags described above to statistically record the use of our Platforms and newsletters and to evaluate them for the purpose of optimising our Services for you. We collect certain activities, such as accessing or filling out the contact form on our website or opening our newsletter to determine whether an advertisement was successful (conversion tracking).
Some of the following providers are located in the USA. Insofar as data are therefore transmitted there, this transmission is permitted under Art. 45 GDPR, as these providers are Privacy Shield certified and therefore have an adequate level of data protection in accordance with the implementing decision of the Commission (EU) 2016/1250.
You can prevent the use of the cookies described here by using the contradiction possibilities of the providers shown below. After the objection, an opt-out cookie is usually stored on your terminal. If you delete your cookies, you must set the opt-out cookie again. Further information on the processing and use of the data by the providers as well as the relevant rights and setting options for the protection of your privacy can be found in the respective data protection information of the providers.
For statistical evaluation of our newsletter campaigns, our newsletter can contain tags with which we can recognize whether and when you have opened an e-mail. Furthermore, we can trace which links were called up in the e-mail. Your IP address will also be recorded. However, this is not stored. No other personal data is also recorded. The legal basis for this processing is a legitimate interest within the meaning of Art. 6 Para. 1 letter f GDPR, whereby the legitimate interest is the evaluation and optimisation of our newsletter. You can opt out of receiving all types of newsletters at any time by using the settings provided in the notification options in your Aklamio account or the opt-out link in the respective emails.
We use the Services of the contractors listed in this section to provide our Services. The legal basis for the use of these contract processors is a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The legitimate interest is in the pursuit of our business purposes, in particular the provision of the Services described in this data privacy declaration. Insofar as we also implement measures to protect the security of personal data stored by us with the involvement of data processors, such as Amazon WebServices Inc, there is an additional legitimate interest in ensuring our technical and organisational measures in this regard. No conflicting interest is apparent, in particular because we have concluded a contract with the respective contractors in accordance with Art. 28 GDPR.
The data is stored by these service providers for the duration for which otherwise storage is legal for purposes according to this data privacy declaration, i.e. in particular for the execution of existing contracts, for analysis purposes, for communication or for advertising communication.
For the purpose of hosting our Platforms and back-up Services, we use the Services of Amazon WebServices, Inc, 410 Terry Drive Ave North, WA 98109-5210 Seattle, USA by way of data processing, so that personal data stored on our Platforms is transferred to this processor. The data will be processed in the EU and the USA. As far as data are transmitted to the USA and thus to a state outside the EU or the EEA, this transmission is permissible according to Art. 45 GDPR, as Amazon WebServices Inc. is Privacy Shield certified and thus an adequate level of data protection exists according to the implementing decision of the Commission (EU) 2016/1250. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
For support Services, we use the Services of Zendesk Inc, 1019 Market St., San Francisco CA 94103-1612, USA and aklamio Spain Services S.L., calle Orense, nº 6 10-A Madrid, 28020, Spain, on the basis of data processing relationships. These companies can receive personal data from us within the framework of the data processing relationship. The data is transmitted to Zendesk Inc. in the USA and thus to a country outside the EU or the EEA. This transmission is permitted under Art. 45 GDPR, as Zendesk Inc Privacy Shield is certified as described in Section 6.1 above. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
The above-mentioned service providers can receive and process your personal data within the scope of the existing data processing with us. The data is transmitted to Google in the USA and thus to a country outside the EU or the EEA. This transmission is permitted under Art. 45 GDPR, as Google Privacy Shield is certified, as described above under Section 6.1. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
We use Amazon web Services for the purpose of proxy caching through data processing. "Proxy Caching" means a technology used in the interest of user-friendliness in which the content of websites, but not personal data, is cached by the proxy caching provider for approximately one hour so that this content can be delivered to visitors more quickly. Amazon WebServices does not store any personal data in the context of proxy caching. However, some of the data flows are routed through Amazon WebServices servers, so that visitors are not connected directly to our servers, but first to those of Amazon WebServices; Amazon WebServices will then make a request to our servers and finally deliver the content to visitors. These data flows can therefore also include personal data.
The data is transmitted to Amazon WebServices in the USA and thus to a country outside the EU or the EEA. This transmission is permitted under Art. 45 GDPR, as Amazon WebServices Privacy Shield is certified, as described above under Section 6.1. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
The data is transmitted to Trello Inc. in the USA and thus to a country outside the EU or the EEA. This transmission is permitted under Art. 45 GDPR, as Trello Inc Privacy Shield is certified as described above under Section 6.1. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000Gn4RAAS&status=Active.
We use the Services of Salesforce.com EMEA Limited, Floor 26 Salesforce Tower, 110 Bishopsgate, EC2N 4AY London, UK (hereinafter also referred to as "Salesforce") on the basis of an data processing relationship for customer service and to improve the quality of service for our corporate customers. Salesforce may receive and process personal customer information under our existing data processing agreement. Salesforce provides several tools to analyze indexed content and draw conclusions.
You can ask us to confirm whether personal data concerning you is being processed by us.
You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate guarantees according to Art. 46 GDPR in connection with the transmission.
This right to information may be limited to the extent that it is likely to make it impossible or seriously impair the realisation of statistical purposes and the limitation is necessary for the fulfilment of statistical purposes.
Your right to correction may be limited to the extent that it is likely to render the statistical purposes impossible or seriously prejudicial and the limitation is necessary for the fulfilment of the statistical purposes.
(4) if you have filed an objection against the processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our justified reasons outweigh your reasons.
If the restriction of the processing has been restricted according to the above-mentioned conditions, you will be informed by us before the restriction is lifted.
Your right to restrict processing may be limited to the extent that it is likely to make it impossible or seriously prejudicial to the fulfilment of statistical purposes and the restriction is necessary for the fulfilment of statistical purposes.
(5) The deletion of personal data concerning you is necessary to fulfil a legal obligation under Union law or the law of the Member States to which we are subject.
(6) The personal data concerning you have been collected in relation to information society Services offered pursuant to Art. 8 para. 1 GDPR.
If we have made the personal data concerning you public and we are obliged to delete it pursuant to Art. 17 para. 1 GDPR, we will take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to inform those responsible for data processing who process the personal data, that you as the data subject have requested the deletion of all links to this personal data or of copies or replications of this personal data.
In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly by a responsible person to another responsible person, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e or f GDPR; this also applies to profiling based on these provisions.
We will then no longer process the personal data concerning you, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct marketing.
If you object to the processing for direct advertising purposes, the personal data concerning you will no longer be processed for these purposes.
You also have the right to object to the processing of personal data concerning you for statistical purposes pursuant to Art. 89 para. 1 GDPR for reasons arising from your particular situation.
Your right of objection may be limited to the extent that it is likely to make the realization of the statistical purposes impossible or seriously impaired and the limitation is necessary for the fulfillment of statistical purposes.
You have the right to revoke your consent to data processing activities at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until revocation.
With regard to the cases referred to in (1) and (3), we will take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person by the person responsible, to state his own position and to challenge the decision.
Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you are staying, working or suspected of infringing, if you believe that the processing of personal data concerning you is contrary to the GDPR.
7.10. Is there an Obligation to Provide Personal Data?
If you create an Aklamio account (see point 4.2.1 above), you must provide certain data within the scope of the contract to be concluded with us. If you wish to withdraw any bonuses credited to your account, you must provide the required withdrawal details. If you make a booking request to our support team, you must provide the information necessary to track your order. Furthermore, the provision of personal data is neither required by law nor by contract, nor are you obliged to provide personal data. However, the provision of personal data for the use of our Services may also be necessary in individual cases. If you do not provide us with the data we consider necessary, we may not be able to provide our Services to you in full.
If you as a corporate customer wish to use our Services (cf. above under Section 4.3.1), you must provide certain data within the framework of the user agreement to be concluded with us. We will then point these out in each case. Furthermore, the provision of personal data is neither required by law nor by contract, nor are you obliged to provide personal data. However, the provision of personal data for the use of our Services may also be necessary in individual cases. If you do not provide us with the information we deem necessary, we may not be able to provide the Services to you in full.
We reserve the right to change this data privacy declaration in compliance with data privacy regulations. The current version can be found here or at any other easily accessible location on our website or Platform. If we intend to process data for purposes other than those for which it was collected, we will inform you in advance in compliance with the statutory provisions.

References: Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 § 257
 § 147
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 26
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 6
 Art. 6
 Art. 28
 Art. 45
 Art. 45
 Art. 45
 Art. 45
 Art. 45
 Art. 46
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 89