Source: https://www.gratiaeeurope.com/privacy-policy
Timestamp: 2019-04-20 13:09:52+00:00

Document:
GRATIAE respects your privacy and wants you to be aware of the steps that we take to protect any information that you provide to us during your visit to gratiaeeurope.com or our other online areas. It's important for you to understand what information we collect and what we do with it. We do not rent or sell your information to anyone for any reason.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally. The data collected is stored in the log file for a period of 30 and then deleted.
You can unsubscribe at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send your unsubscription request at any time to [email protected] by e-mail. After the unsubscription your e-mail address will be deleted from the list of the newsletter distribution list.
We use the newsletter of the newsletter mailing platform "MailChimp" of Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.
The e-mail addresses of our newsletter recipients as well as their further collected data are stored on the servers of MailChimp in the USA as described below.
MailChimp uses this information exclusively for sending and evaluating the newsletter on our behalf.
In addition MailChimp can also use this data according to its own information to optimize or improve its own services, for example to technically optimize the dispatch, to improve the presentation of newsletter content or to determine from which countries the recipients come. However, MailChimp does not use the data to write to our newsletter recipients or to pass them on to third parties.
MailChimp is certified under the EU-US "Privacy Shield" and thus commits itself to comply with the data protection level of the European Union and the EU data protection regulations.
Furthermore, we have concluded a contract with MailChimp for data processing in which MailChimp undertakes to protect the data of our newsletter recipients, to process them on our behalf in accordance with their data protection regulations and in particular not to pass them on to third parties. The data protection regulations of MailChimp can be viewed here.
The newsletters contain a so-called "web-beacon", which is a pixel-sized file that is retrieved from the MailChimp server when the newsletter is opened. Within the scope of this retrieval, information about the browser and your system, your IP address and the time of retrieval of MailChimp are collected. This information is used to technically improve the services.
It is also evaluated whether and if so, when the newsletters are opened and which links are clicked. Although this information can be assigned to individual newsletter recipients for purely technical reasons, it is not used to monitor user behavior. Rather, we use the analysis reports to identify our users' reading habits and adapt our content to them.
The use of the newsletter dispatch service provider MailChimp, the execution of the analyses as well as the protocol of the registration procedure are carried out on the basis of our legitimate interests according to Art. 6 Para. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of our users.
For the comment function on our site, in addition to your comment, the time of entry of the comment, your e-mail address and, if you do not post anonymously, the user name you have chosen will be saved and published.
In addition, the IP addresses used by the author of the comment are stored.
Since the comments are not checked before being displayed on our website, we need this data in order to be able to take action against the author in the event of legal infringements, such as insults or propaganda.
The comments are stored on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. All you need to do is send an informal message by e-mail to [email protected] The legality of the data processing processes already carried out remains unaffected by the revocation.
If you wish to contact us via the contact form provided on our website, by e-mail, telephone, fax or via social media platforms and request information about your orders or your customer status, it may be necessary to provide us with personal data such as your first name, telephone number and e-mail address or order or invoice number in order to process your request sensibly. These data will be used exclusively for the verification and processing of your enquiry and will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.
The data provided by you will not be passed on to other third parties.
The processing of the data entered in the contact form is thus carried out exclusively on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time. All you need to do is send an informal e-mail to us at [email protected] The legality of the data processing processes carried out up to the revocation remains unaffected by the revocation.
In the event that you contact us via a social media platform, we would like to point out that this is not our property or our sphere of control and therefore the protection and confidentiality of the data provided to us via the respective social media platform cannot be guaranteed. For questions regarding data protection, please contact the operators and owners of the respective social media platform.
For example, we use so-called session cookies to recognize that you are visiting individual pages of our website. These will be deleted automatically after leaving our site.
Most browsers automatically accept cookies. However, you can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases or no cookies are stored on your computer. However, the complete deactivation of cookies can lead to the fact that you cannot use all functions of our website.
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 f GDPR. With the tracking measures used, we want to ensure that our website is designed to meet requirements and is continually optimized. On the other hand, we use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.
Google Analytics uses so-called "cookies" (see section 4.). These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services associated with the use of the website and the Internet for the purposes of market research and demand-oriented design of these Internet pages. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.
Google Analytics cookies are stored on the basis of Art. 6 Par. 1 lit. f GDPR. We have a legitimate interest in analyzing the user behavior of our website visitors in order to optimize our offers.
We have activated the function "IP-Anonymization" on this website. This will cause your IP address to be cut by Google within Member States of the European Union or in other countries party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Our website also uses Google Conversion Tracking, an analysis service of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google AdWords will set a cookie on your device ("conversion cookie") if you have accessed our website via a Google ad. These cookies expire after 30 days and do not serve the personal identification of users. If you visit certain pages of ours and the cookie has not expired, we and Google may recognize that someone clicked on the ad and was redirected to our page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked through the websites of various AdWords customers. The information collected with the help of the conversion cookie is used to generate conversion statistics for us. As an AdWords customer, we know the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that personally identifies users.
If you do not want information about your behavior on the website to be processed in the tracking process, you can also refuse the setting of a cookie required for this - for example using a browser setting that generally deactivates the automatic setting of cookies. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the "googleadservices.com" domain.
You can prevent Google from using cookies in the future by making the appropriate setting on the http://www.google.com/settings/ads website.
On our website we use technologies from Bing Ads (bingads.microsoft.com), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft will set a cookie on your device if you have accessed our website via a Microsoft Bing ad. Microsoft and we can see in this way that someone has clicked on an ad, has been redirected to our website and has reached a pre-defined target page ("conversion site"). We only see the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information about the cookie from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to play advertisements. No personal information concerning the identity of the user is processed.
The information collected is transmitted to Microsoft servers in the United States and stored there for a maximum of 180 days.
If you do not want information about your behavior to be used by Microsoft as described above, you can refuse the setting of a cookie required for this purpose - for example, using a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by clicking on the following link http://choice.microsoft.com/de-DE/opt-out and declaring your objection. Further information on data protection and the cookies used at Microsoft and Bing Ads can be found on the Microsoft website https://privacy.microsoft.com.
We use social plug-ins of the social networks Facebook, Twitter, Instagram, YouTube and Pinterest on our website on the basis of art. 6 par. 1 p. 1 lit. f GDPR to make our company better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of the GDPR. Responsibility for data protection-compliant operation must be guaranteed by the respective provider.
If you are logged in to Facebook, Facebook can associate your visit to our website directly with your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "PART" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights and setting options for the protection of your privacy can be found in Facebook's data protection information at: https://www.facebook.com/about/privacy/.
Our website contains plugins of the short message network of Twitter Inc. (Twitter) integrated. You can recognize the Twitter plugins by the Twitter logo on our site. An overview of tweet buttons can be found at: https://about.twitter.com/resources/buttons.
Our website also uses so-called social plugins from Instagram, which is operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA.
The Pinterest Button of Pinterest Inc. 808 Brannan St, San Francisco, CA 94103, USA, is integrated on our website. This transmits your IP address to a Pinterest server in the USA. If you are logged in to Pinterest with the same browser when you visit our site, this information can be linked to your profile. If you click on the plug-in "Pin-It", this is also transmitted to Pinterest and published via your account there.
You can set your privacy on Pinterest at http://pinterest.com/about/privacy.
If you do not agree to the transfer of your data to Pinterest, please log out of Pinterest before visiting our website.
We collect, process and use personal data only to the extent necessary for the establishment, content design or change of the legal relationship (inventory data). This is done on the basis of Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. The collected customer data will be deleted after completion of the order or termination of the business relationship and expiry of the warranty period. Legal retention periods remain unaffected.
When you place an order as a guest in our online shop, the following data is collected, processed and used by you to process your order: Name, first name, billing and delivery address, e-mail address, telephone number ("customer master data").
It is also possible to set up a customer account during the ordering process so that you do not have to re-enter your master data and register directly in the customer account under your password for subsequent orders. To do this, you must provide your e-mail address and a password of your choice twice, as well as your express consent, before placing your order.
In order to ensure the best possible support for our customers, we pass on the data to other companies within the scope of what is legally permissible exclusively for the proper performance of the contract and only to the extent necessary for this - for example to the companies entrusted with the delivery of the goods or the credit institution commissioned with the processing of payments - and ensure that we only process your data in accordance with our instructions. Your data will not be passed on to third parties without your express consent, for example for advertising purposes. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures.
The collected customer master data will be deleted after completion of the order or termination of the business relationship after expiry of the statutory warranty period. Legal retention periods remain unaffected.
The customer master data stored in the customer account on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR will be stored for future order enquiries until you revoke your consent and/or delete your account.
On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
Payment transactions via the common means of payment (American Volume/credit guard/authorize.net) are made exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 art. 6
 Art. 6
 Art. 6
 Art. 6