Source: https://www.folia.de/en/disclaimer/privacy.html
Timestamp: 2019-04-19 13:03:57+00:00

Document:
As the operator of this website (https://www.folia.de), Max Bringmann KG, Johann-Höllfritsch-Str. 37, 90530 Wendelstein, is the responsible body (controller) within the scope of the European General Data Protection Regulation (GDPR) and has the exclusive authority to decide either alone or with others, on the purposes and methods of processing personal data, hereinafter referred to as “data”.
In accordance with the GDPR, personal data is all information relating to an identified or identifiable natural person (data subject). A natural person is identifiable if they can be identified directly or indirectly, in particular by means of assignment to an identifier (e.g. name, address, telephone number, email address, IP address, location data or special characteristics including the genetic, economic and social identity of the natural person).
Processing is any treatment performed with or without the use of automated procedures or any series of operations associated with data. This includes, in particular collection, capture, organisation, classification, storage, adaptation or modification, reading out, search, use, disclosure by transmission, distribution or provision, comparison, linking, restriction, deletion or destruction.
It is generally not necessary for you to provide data to use our website. However, we may in some cases require your name, address and other information to enable us to provide the services you request.
The same applies for example when sending information material and goods you have ordered or to respond to your queries and, where necessary, we will inform you accordingly. In addition, we only process data that you provide to us voluntarily and, where applicable, the data we collect automatically when you visit our website (e.g. IP address and the names of the pages you have accessed, the browser you used, the operating system, date and time of access, search engines used, names of files downloaded).
If you make use of our services, we generally only collect data to the extent required to provide our services. Insofar as we request additional information, this will be provided on voluntarily.
The processing of data takes place exclusively to fulfil the service requested and to safeguard our own legitimate business interests.
Data Protection Act in its currently valid version.
We have taken all the technical and organisational measures to ensure that we and our external service providers observe the relevant data protection regulations. We oblige our employees and the service companies commissioned by us to maintain confidentiality and to comply with the provisions of the GDPR and the Federal Data Protection Act in its currently valid version.
We process the data provided by you in accordance with the principles of data economy and purpose limitation. The purpose limitation principle stipulates that data must be collected for specific, explicit and legitimate purposes and further processed in a manner that is incompatible with such purposes. Additional processing for public archival purposes, for scientific, historical research or statistical purposes shall not be deemed incompatible with the original purposes.
We essentially process your data to respond to your enquiries, to process your orders or to enable you to access specific information or offers. Customer services may also require that we or a service provider commissioned by us use this information to inform you about product offers or to conduct online surveys to serve our customers' needs and requirements more effectively.
We will process the data provided by you online exclusively for the purposes we have indicated. We do not transfer your data to third parties without your express consent.
The collection and disclosure of data to authorised, state institutions and authorities shall only take place within the scope of the relevant legislation or insofar as we are obliged to disclose such information by a court decision.
We do of course respect your decision to decline the provision of your data to support our customer relationship (in particular for direct marketing or market research purposes). We will not sell or otherwise market your information to third parties unless you provide your express consent for us to do so.
When you use our website, the following data may be processed for organisational and technical reasons in some circumstances: IP address and the names of the pages you have accessed, the browser you used, the operating system, date and time of access, search engines used and the names of files downloaded.
When you visit one of our websites, we may store information in the form of a (session) cookie on your computer. Cookies are small text files sent from a web server to your browser and stored on your computer's hard drive.
No personal data of the user is stored apart from the Internet protocol address, and this information is used to automatically recognise you on your next visit to our website and to facilitate navigation. For example, cookies allow us to customise a website to match your interests and to save your password to avoid having to re-enter it every time.
You can of course, also view our websites without cookies. If you do not want us to identify your computer, you can select “Do not accept cookies” in your browser settings to prevent cookies from being stored on your hard drive. Please view the instructions in your browser for details on how to do this. However, if you decline cookies, you may experience functional limitations regarding our offers.
If you do not agree with the storage and evaluation of the data collected during your visit, you can click here to object to the storage and use of such data at any time. An opt-out cookie will then be stored in your browser and Piwik will not collect session data.
Important: If you delete your cookies, the opt-out cookie will also be deleted and you will therefore have to reactivate it.
Our websites use the "+1" button on the Google Plus social network operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google"). The button is recognisable by the "+1" logo on a white or coloured background.
When you visit a web page on our website that contains this button, your browser will establish a direct connection to Google's servers. The content of the "+1" button will be sent by Google direct to your browser and incorporated into the website by Google. We therefore have no control over the volume of data Google collects using this button, but we assume that your IP address will be logged.
If you are a Google Plus member and do not want Google to collect information about you from our website and link it to your member data stored on Google, you must log out of Google Plus before visiting our website.
If you want to prevent Instagram from assigning your visit to our website to your Instagram account, you must log out of your Instagram account before visiting our website.
Our website contains plugins from the social network Facebook, which is operated by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA. The Facebook Share plugin is identified by a blue logo with the letter "f" in white.
Users of our website should note that the plugins for Facebook are installed on our website. If you click on one of the buttons, a direct connection to Facebook will be established by the respective plugin. The content of the plugin you use is transmitted by Facebook direct to your browser. We cannot influence the content of the data transmitted, however we would like to inform you, as far as we are currently aware, about which data is transmitted to Facebook.
If you use the plugins, i.e. if you click the relevant button, information that you have accessed specific pages on our website will be forwarded to the Facebook servers. If users are simultaneously logged in with Facebook for example, this means that their data will be associated with their personal account. If you use the buttons, i.e. the Facebook plugins, this information is transmitted from your browser direct to Facebook and stored there. Even if you are not a member of the above social networks, Facebook may still be able to identify and store your IP.
If you do not want Facebook to collect data about you via our website, please log out of Facebook before visiting our website. You can also use add-ons for your browser to block the Facebook plugins.
Our websites contain features of the Twitter service provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco CA 94107, in the United States ("Twitter"). The plugin is identified with the Twitter logo.
Users of our website should note that the plugins for Twitter are installed on our website. If you click on one of the buttons, a direct connection to Twitter will be established by the respective plugin. The content of the plugin you use is transmitted by Twitter direct to your browser. We cannot influence the content of the data transmitted, however we would like to inform you, as far as we are currently aware, about which data is transmitted to Twitter.
If you use the plugins, i.e. if you click the relevant button, information that you have accessed specific pages on our website will be forwarded to the Twitter servers. If users are simultaneously logged in with Twitter for example, this means that their data will be associated with their personal account. If you use the buttons, i.e. the Twitter plugins, this information is transmitted from your browser direct to Twitter and stored there. Even if you are not a member of the above social networks, Twitter may still be able to identify and store your IP.
If you do not want Twitter to collect data about you via our website, please log out of Twitter before visiting our website. You can also use add-ons for your browser to block the Twitter plugins.
Our website contains features of the XING network provided by XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. The plugin identified by a two-colour Xing logo on a white background.
Users of our website should note that the plugins for XING are installed on our website. If you click on one of the buttons, a direct connection to XING will be established by the respective plugin. The content of the plugin you use is transmitted by XING direct to your browser. We cannot influence the content of the data transmitted, however we would like to inform you, as far as we are currently aware, about which data is transmitted to XING.
If you use the plugins, i.e. if you click the relevant button, information that you have accessed specific pages on our website will be forwarded to the XING servers. If users are simultaneously logged in with XING for example, this means that their data will be associated with their personal account. If you use the buttons, i.e. the XING plugins, this information is transmitted from your browser direct to XING and stored there. Even if you are not a member of the above social networks, XING may still be able to identify and store your IP.
If you do not want XING to collect data about you via our website, please log out of XING before visiting our website. You can also use add-ons for your browser to block the XING plugins.
If you click the YouTube button, you will access our embedded video(s) on YouTube. We only enable you to connect to the YouTube service. YouTube is a service provided by Google Inc. (“Google”).
Our website uses plugins from Youtube.co.uk/Youtube.com, operated by YouTube, LLC, represented by YouTube, LLC, Cherry Ave., USA ("YouTube"). The plugins can be recognised by one of the YouTube logos (for example a white "Play" symbol on a red background or the word "YouTube" in white with "Tube" on a red background). When you access the website of a YouTube plugin, you will be connected to the YouTube servers and your browser will display the plugin on the website.
If you are a member of Flickr and do not want Yahoo to collect information about you through our website and associate it with your membership data stored on Yahoo, you must log out of Flickr/Yahoo before visiting this website.
The plugins of the social network Pinterest ("Pinterest") are integrated on our website. Pinterest is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-4904, USA. The Pinterest plugin can be recognised by the “pin it” button or the “P” button on our site.
When you visit our pages, the plugin establishes a direct connection between your browser and the Pinterest server. Pinterest receives the information that you have visited our site with your IP address. If you click the Pinterest “pin it” button or the P button when you are logged into your Pinterest account, you can link the contents of our pages to your Pinterest profile. This allows Pinterest to associate your visit to our pages with your user account.
If you are a Pinterest member and do not want Pinterest to collect information that can be attributed to you personally from our website except for the IP address and link it to your Pinterest member information, you must log out of Pinterest before visiting our website and do not lick any of the Pinterest buttons on our website.
Please note that we as the provider of the website are not aware of the content of the data transmitted and the use of such by Pinterest.
For more information about how Pinterest collects and uses your data, your rights and how to protect your privacy, please visit https://policy.pinterest.com/en-gb/privacy-policy.
Our website is aimed exclusively at potential applicants/customers, business partners and representatives of the press.
Persons under the age of 16 should not submit data to us without the consent of their parents or legal guardians. We do not request data from children and minors under the age of sixteen. We do not collect such data and do not disclose it to third parties.
We have implemented technical and organisational security measures in accordance with legal requirements to protect your data from loss, destruction, manipulation and unauthorised access. All our employees and all persons involved in data processing must comply with the General Data Protection Regulation, the Federal Data Protection Act in its currently valid version and any other legislation relating to data protection and the confidential handling of data.
We also conclude the relevant contracts relating to order processing with our external service providers.
Our security measures are regularly reviewed and constantly updated in accordance with the latest technological developments.
If we require your consent to process your data, we will collect and use it for the purposes stated in the consent. Your consent will be logged digitally.
You can revoke your consent at any time with effect for the future. To do so, please write to Max Bringmann KG, Johann-Höllfritsch-Str. 37, 90530 Wendelstein or send an email to datenschutz@folia.de.
If you have subscribed to our newsletter and have agreed to receive regular updates regarding interesting offers and information from Max Bringmann KG, you have provided your express consent to use your email address for advertising purposes. You will then receive newsletters and information on the following topics: trends, crafting ideas, news, attendance at trade fairs and news.
We have logged your consent and are required to ensure that the content of such is available at any time.
You can revoke your consent at any time with effect for the future. If you wish to revoke your consent, please write to Max Bringmann KG, Johann-Höllfritsch-Str. 37, 90530 Wendelstein or send an e-mail to datenschutz@folia.de.
If you use our contact form to contact us, we will ask you to submit personal information. A valid email address is required for us to respond to your enquiry, but you can provide additional information about you voluntarily.
Your details will be processed by email.
The contact form is sent using end-to-end encryption.
Your data will be stored on protected servers in Germany in compliance with the relevant data protection regulations.
The data processing for the purpose of contacting us is based on the consent you provide voluntarily. When you click the "Send" button, you consent to the processing of your contact information for the above purposes. If you do not agree to such processing, you must cancel the process, the contact form will not be sent and your personal data will not be processed.
You can revoke your consent at any time with effect for the future.
We only use your data to the extent necessary to process your requests and for further correspondence with you. The data we collect when you use the contact form will be stored by us to process the request and in the event of follow-up questions and will be deleted under data protection law after the completion of the request unless a further statutory retention requirement exists. We use a contact form to process your request.
When you submit your application data, you consent to the processing of your data for the specific and respective application process. You can revoke your consent at any time with effect for the future.
We would like to inform you that the data you enter in the form "unsolicited application” at https://www.folia.de/ueber-uns/bewerbung.html?bewerbung=Initiativbewerbung and the data you submit in our online job applications will be used exclusively to process the employment relationship.
The information required for the application is your name, last name, telephone number, email address and application documents including a cover letter, CV, diplomas, certificates, etc. (hereinafter "application data"). The processing of your application data is required to determine whether we enter into an employment relationship with you within the meaning of Art. 88 para. 1 GDPR and § 26 BDSG.
In principle, your application data will only be forwarded internally to the departments within our company responsible for the specific application process. Your application data will not be disclosed to third parties unless you have expressly consented to the disclosure of such.
Your application data will be deleted three months after the completion of the application process. This does not apply if legal provisions prevent deletion, if further storage is necessary to provide evidence or if you have expressly consented to extend the period of storage.
We have taken various technical and organisational measures to protect the data we collect in your application against manipulation and unauthorised access. In particular, the transmission of your online application is encrypted in accordance with the currently recognised state-of-the-art methods.
You can obtain information from us at any time about the data processed about you at pursuant to Art. 15 GDPR.
In particular, you may request information about the purposes of the processing, the categories of data processed, categories of potential recipients and the anticipated period of storage.
Please address your request for information to Max Bringmann KG, Johann-Höllfritsch-Str. 37, 90530 Wendelstein, or send an email to datenschutz@folia.de.
In the event of incorrect data in accordance with Art. 16 GDPR, you are entitled to request the rectification or completion of the personal data stored by us.
You can assert your right using the contact details above.
In accordance with Art. 17 GDPR, you may request the deletion of your data if the storage of such is no longer necessary and there is no additional legal basis for processing. You may also request deletion if you have objected to processing and there are no prior, legitimate grounds for further processing, if your data has been improperly processed or if there is a legal obligation to delete the data under the relevant EU or national legislation.
In addition, you have a right under Art. 18 GDPR to restrict processing if you dispute the accuracy of the data for a period of time that enables the controller to verify the accuracy of the data; if the processing is illegal, but you reject the deletion of the data; if the purpose of the processing has been completed, but the data is necessary to assert your legal claims or if you have objected under Art. 21 GDPR and there is some doubt as to whether the legitimate reasons of the controller prevail over your interests.
In accordance with Art. 20 GDPR you have the right to obtain your personal data in a standard, structured and machine-readable format (data portability). Under certain circumstances, you may also request your data to be transmitted direct by a responsible party, as far as technically possible.
You have the right to object to the use of your data for the above purposes at any time (Art. 21 GDPR). This is possible provided the objection is against direct marketing or if legitimate reasons exist for such arising from your specific situation. If you oppose to direct mailing you have a general right to object, which is implemented by us without specifying any particular circumstances.
To assert your right to object, please write to Max Bringmann KG, Johann-Höllfritsch-Str. 37, 90530 Wendelstein, or send an email to datenschutz@folia.de.
You can also contact the DPO for any requests for information, suggestions or complaints.
In addition, please note that, without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you consider that the processing of your personal data conflicts with the provisions of the General Data Protection Regulation.

References: Art. 88
 § 26
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 21
 Art. 20