Source: https://www.deinhard.com/en/privacy-policy
Timestamp: 2019-04-24 12:46:03+00:00

Document:
Deinhard KG and its associated platform deinhard.com/en (hereafter “we”) respect your privacy and personality rights. We take the protection of your personal data such as your name, date of birth, address, e-mail address or telephone number very seriously. This Data Protection Statement explains the collection, processing and utilisation (hereafter collectively referred to as “processing”) of your personal data if and when these are gathered during the use of our website.
In addition, all persons subject to data processing are advised of the rights to which they are entitled. We handle these data in strictest compliance with applicable statutory data protection regulations and the following principles. We have implemented numerous technical and organizational measures to ensure the comprehensive protection of the personal data processed via our website.
Personal Data are any information that refer to an identified or identifiable natural person (hereafter “you “). A natural person is considered identifiable when he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychic, economic, cultural or social identity of that natural person.
Pseudonymisation is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, as long as such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. When the purpose and means of such processing are determined by EU or member state law, the controller or the specific criteria for its nomination may be provided for by EU or member state law.
Data Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Controller.
Consent is any freely given, specific, informed and unambiguous indication of the data subject, in the form of a statement or clear affirmative action, by which the person concerned signifies agreement to the processing of personal data relating to him or her.
A supervisory authority is an independent public agency set up by a member state pursuant to Art. 51 GDPR.
In all the following data processing cases, we observe the principles of data prevention and data economy. This means that we process as few data as possible.
a. We process your personal data if and when this is required to substantiate, perform or terminate a contractual or quasi-contractual relationship. The legal basis for the processing of personal data in connection with a contractual or quasi-contractual relationship is Art. 6 Subsec. 1 Clause 1 b GDPR. This also applies to processing required for the completion of pre-contractual measures. The personal data are deleted on termination of the contractual or quasi-contractual relationship taking the statutory archiving period into account.
As part of the contractual relationship, there may be a transmission of personal data to a third party which uses these data exclusively for the purpose of contract performance. This applies in particular for postal delivery services for the delivery of goods and to payment providers for the performance of payment obligations.
b. In all other respects, we process your personal data if and when you have granted us your consent to do so whereby your data will be used only for the stated purpose and scope, e.g. we will inform you of our products and services only with your consent. The legal basis for data processing on the basis of your consent is Art. 6 Subsec. 1 Clause 1 a GDPR whereby you are entitled to a right of revocation in the future. You may submit your revocation by regular mail or e-mail to the Controller at the contact address stated in Item 1. The legality of data processing up to the time of asserting your rights remains unaffected by the objection. The personal data will be deleted after fulfilling the purpose for which consent was granted, taking the statutory archiving period into due account. As part of the consent, there may be a transmission of your personal data to a third party which uses these data exclusively for the purpose for which the consent was granted.
c. Besides, your personal data will be processed anonymously. If the processing is required to safeguard the legitimate interest of ours or of a third party and if the interests, basic rights and basic liberties of the data subject do not prevail over the interests of the former, Art. 6 Subsec. 1 Clause 1 f GDPR serves as the legal basis whereby there is the possibility in principle to object to the data processing in the future. You may submit your objection by regular mail or e-mail to the Controller at the contact address stated in Item 1. The legality of data processing up to the time of asserting your rights remains unaffected by the objection. The personal data will be deleted after meeting the legitimate interest or objection taking the statutory archiving period into due account. As part of the legitimate interest, there may be a transmission of your personal data to a third party which uses these data exclusively for the purpose of meeting the legitimate interest.
Our website may provide for a registration or application (e.g. for the newsletter) by quoting personal data. Which personal data are transmitted to the Controller at such a time is shown in the respective registration mask. The data entered by you will be used exclusively for the purposes in connection with registration. When you contact us by e-mail, via a contact form or by a comparable method (e.g. enquiries about our products or services), the personal data transmitted by you will also be processed. However, this type of data processing is limited to the processing of enquiries or to enter into contact with you. During registration and application, your IP address at the time of registration, application or entry into contact as well as the date and time of access will be processed.
This data processing is necessary to prevent the abuse of our services so that offences committed by means of these data can be investigated. This represents a legitimate interest in the data processing. The legal basis for this type of processing if consent was granted is Art. 6 Subsec. 1 Clause 1 a GDPR whereby in this case you are entitled to a right of revocation in the future. You may submit the revocation by regular mail or e-mail to the Controller at the contact address stated in Item 1. The legality of data processing up to the assertion of your rights remains unaffected. As part of contractual or quasi-contractual relationships, the legal basis rests on Art. 6 Subsec. 1 Clause 1 b GDPR. This applies e.g. to an entry into contact which aims at the conclusion of a contract. Otherwise, the legal basis rests on Art 6 Subsec.
1 Clause 1 f GDPR. The legitimate interest results from the above-mentioned legitimate reasons. There is the possibility of raising an objection against this data processing in the future. You may submit the objection by regular mail or e-mail to the Controller at the contact address stated in Item 1. The legality of data processing up to the assertion of your rights remains unaffected. The personal data are deleted after a revocation or when the legitimate interest is met or after an objection taking the statutory retention period into account. When entering into contact, your data are deleted as soon as the respective enquiry was dealt with or if you object to data processing whereby in the latter case the correspondence with you will be terminated.
We do not process these data together with other personal data from you, i.e. we do not allocate the above data to your person.
The legal basis for the processing of automatically generated data is Art. 6 Subsec. 1 Clause 1 f GDPR. This processing is required to ensure the functional integrity of the website and to optimise and properly display the contents of our website, and to supply the necessary information needed by investigators in the case of a cyber attack. This is another part of legitimate interest in the data processing. The automatically generated data are deleted when they are no longer needed for the above purposes, i.e. when the respective website visit has ended. Your IP ad-dress if processed will be deleted latest in 7 days. The processing of the above data for the supply of the website and the possible storage in log files is imperative for the operation of the website. Consequently, no objection is possible.
We, or our website host, collect on the basis of our legitimate interest in the sense of Art. 6 Subsec. 1 lit. f. GDPR data on every access to the server on which our services are hosted (so-called server log files). Access data include the name of the webpage visited, file, date and time of access, downloaded data volume, report of a completed download, browser type and version, the operating system of the user, the referrer URL (the website viewed just prior thereto), IP address and accessing provider. For security reasons (e.g. for the investigation of abuse or fraudulent acts), log file information is stored for a maximum of 10 days and is thereafter deleted. Excepted from deletion are data which must be stored up to the final clarification of an ongoing case.
The following describes the various kinds of cookies and comparable technologies used on our website.
Cookies have different storage periods. Our website uses both "permanent cookies" and "session cookies”.
aa. Session cookies are stored only during your actual visit to our website and serve to provide for the unrestricted use of our services and the most comfortable use of our website at the occasion of the current visit. When session cookies are disabled, it cannot be guaranteed that all our services can be used without restriction.
These cookies are mandatory to ensure that our website and its functions work properly. They allow improving comfort and performance of websites and make available various functions. This allows e.g. to store data already entered (as e.g. user names, age, language selection or your physical location) to save you from having to enter these data once again.
These Cookies serve to provide information on your use of our website. They make it possible e.g. to identify especially popular areas of our online offer which in turn enables us to adapt the contents of our website to reflect your needs. More detailed information on these cookies and their individual deletion can be found under lit. e).
These cookies are used to display advertisements that are more relevant to the user and more in line with his or her interests. This information may be shared with third parties such as advertisers, e.g. Cookies to improve the approach to the target audience and advertising are often linked with webpage functions of third parties. For more information on marketing cookies and their individual deletion, see lit. e. Our webpage may also include contents of third-party providers such as Facebook services or YouTube videos. These third parties may deposit cookies while you are viewing our website and in this way receive information on your website use. These cookies are primarily used to integrate social media contents and social plug-ins on our page. Further information on the above can be found in Item 8 and on the website of the third-party provider.
The cookies process exclusively anonymized and pseudonymized data (data processing). The supply of these data is neither legally nor contractually prescribed, nor required for contract conclusion. If personal data in the form of pseudonymized data are processed, the legal basis for this is the consent granted by you on accessing our website (Art. 6 Subsec. 1 Clause 1 a GDPR) or our legitimate interest or that of the third-party provider in direct mail (Art. 6 Subsec. 1 Clause 1 f GDPR).
You can visit our website also without any cookies. The storage of new cookies and the deletion of cookies already deposited can be achieved with the following measures: In the event of data processing on the basis of legitimate interest (Art. 6 Subsec. 1 Clause 1 GDPR), an objection to all or only to selected cookies can be declared by activating *Accept No Cookies* in your browser settings. However, it is possible that some website functions can then no longer be used to the full extent if some or all cookies for a website are disabled. For information on the automated deletion of Cookies, please see the operating instructions of your browser or manufacturer of your terminal device. Additional information on functional cookies and marketing cookies (Type 2 & Type 3) and on their individual deletion vis-a-vis specific third parties is given below.
To improve comfort and quality of our service, this website uses the following website services of Googler Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google receives and processes the data generated on our website through the use of the appropriate cookies.
(i) Google Analytics: Google Analytics uses temporary cookies which allow analysing your website use. The stored data on our website including your IP address (“access data”) are as a rule transferred to a Google server in the USA and stored there. We point out that on our webpages, Google Analytics is enhanced by the code „gat._anonymizeIp();;“ to ensure the anonymised logging of IP addresses (so-called IP masking). Through the activation of IP anonymization on our website, the IP address is truncated by Google within the member states of the European Union or in other member states of the Treaty on the European Economic Area. Only in exceptions is the complete IP address transferred to a Google server in the USA and truncated there.
(iii) Google AdWords: This website uses Google AdWords, an Analyser service of Google Inc., and conversion tracking as part of Google AdWords. For Google AdWords, a temporary Cookie for conversion tracking (a so-called “conversion cookie“) is deposited on youth terminal device when you click on an advertisement provided by Google. These cookies lose their validity after 30 days and are not used for identifying a user. If you visit certain parts of our website, we and Google can recognize that you clicked on this ad and were routed to this page. The information obtained with the help of the conversion cookies serves to prepare statistics for AdWords customers who use conversion tracking. These statistics tell us the total number of users who have clicked on an ad provided by Google and were routed to a webpage with a conversion tracking tag. Next to conversion tracking, the remarketing or “similar target group” function is also used.
Further information on Google AdWords can be found at the following links: http://www.google.com/privacy/ads/ and http://www.google.de/policies/technologies/ads/If not stated otherwise, the maximum validity of special cookies is 90 days.
You have the right to revoke your consent for the processing of personal data at any time. The legality of data processing up to the time of the revocation remains unaffected by the revocation.
You have the right to lodge an objection at any time against the processing of your personal data pursuant to Art. 6 Subsec. 1 Clause 1 lit. e or f GDPR (Art. 21 Subsec. 1 GDPR). The legality of data processing up to the time of the objection remains unaffected by the objection. In the case of an objection, we no longer process the personal data except if we can demonstrate cogent protection-worthy reasons for the processing which prevail over your interests, rights and liberties, or if processing serves the assertion, exercise and defence of a legal claim.
If your personal data are used for direct mail, you have a right of objection against this practice at any time (Art. 21 Subsec. 2 GDPR). In the case of an objection, we no longer process the personal data. The legality of data processing up to the time of the objection remains unaffected by the objection. You may forward your revocation and objection at any time by regular mail or e-mail to the Controller at the contact address stated in Item 1 above.
You have the right to demand from us a confirmation whether your personal data are being processed by us.
You have the right to demand from us at any time and free of charge information on your personal data and receive a copy of this information. You furthermore have the right to demand information whether your personal data were transferred to a non-member state or to an international organisation. If this is the case, you are also entitled to receive information on suitable guarantees in connection with the transfer.
You have the right to demand the prompt correction of incorrect personal data on your person. You furthermore have the right to demand the completion also by way of a supplementary declaration, taking the processing purpose into due account.
· The personal data were collected for purposes or processed in other ways for which they are no longer required.
· You revoke your consent on which processing was based pursuant to Art. 6 Subsec. 1 a GDPR or Art. 9 Subsec. 2 a GDPR, and there is no other legal basis for the processing.
· You lodge an objection to the processing in the sense of Art. 21 Subsec. 1 GDPR and there are no cogent or prioritary reasons for the processing.
· You lodge an objection to the processing in the sense of Art. 21 Subsec. 2 GDPR.
· The erasure of the personal data is required for the performance of a legal obligation under EU law or the laws of a member state.
· The personal data were collected for services offered in an information society as per Art. 8 Subsec. 1 GDPR.
· The veracity of the personal data is disputed by you for a period of time that allows the Controller to verify the veracity of your personal data.
· Processing is unlawful. You refuse the erasure of the personal data and instead demand that access to your personal data is restricted.
· We no longer require the personal data for processing purposes while you still require them to assert, exercise or defend a legal claim.
· You have lodged an objection against the processing as per. Art. 21 Subsec. 1 GDP and it is not yet clear whether legitimate reasons or those of your own will prevail.
You have the right to receive the personal data supplied by you in a well-structured, commonly used and machine-readable format. You also have the right to transfer these data to another controller without any interference on our part provided processing rests on consent as per Art. 6 Subsec. 1 Clause 1 a GDPR or on a contract as per Art. 6 Subsec. 1 Clause 1 b GDPR and processing is made with the use of automated processes, furthermore provided that processing was not required for the completion of a task in the public interest or undertaken in exercise of official authority assigned to the Controller. Furthermore, when exercising your right to data portability, you have the right to demand that the personal data are transmitted directly from one controller to another when this is technically feasible and provided the rights and liberties of other persons are not affected thereby.
In addition to these rights, you have a right of complaint to the supervisory authority competent for data protection (in Hesse: Hesse State Officer for Data Protection and Freedom of Information, Wiesbaden).
Due to our legitimate interests (Art. 6 Subsec. 1 lit. f. GDPR), we use the contents or services of third-party providers (hereafter referred to as “contents”) on our website. This involves e.g. the integration of videos, the use of fonts etc. To ensure the correct display of contents, the third-party providers frequently must record your IP address since otherwise their contents cannot be sent to your browser. We endeavour to use only those providers that use your IP address exclusively for the display of offered contents.
For marketing purposes or statistical evaluations, third-party providers may also make use of so-called pixel tags. Information as e.g. the number of visitors to the website can be analysed in this way. The logged information can be stored in cookies on the device of the user although exclusively in pseudonymous anonymized form. This includes among other information on the browser and operating system used, the referring website, the time of access and information on the use of our website and may be aggregated with information from other sources.
For the optimised display, we use fonts from “Google Fonts”. This is an offer from provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For the Data Protection Statement of the provider, see: https://www.google.com/policies/privacy/ The Opt-Out can be added by using the link: https://adssettings.google.com/authenticated .
In the event that your personal data are transferred to agencies in states outside the EU or EEA, this is done only when the EU Commission has decided that the non-member state in question, or a territory or several specific areas in the non-member state, offer an adequate protection level or that an adequate or suitable data protection guarantee in the sense of Arts. 46, 47 or 49 GDPR is available.
We do not process data of persons below the age of 16. Data found to have been transmitted to us without the consent of the parents or guardian will be erased by us promptly. This presupposes the receipt of relevant hints from parents or guardians.
We process your personal data only for the period required to meet the storage purpose or when the storage is required under applicable statutory data protection regulations. If the storage purpose lapses or when the archiving period prescribed by applicable statutory data protection regulations runs out, the personal data will be routinely erased or access restricted or blocked in line with statutory provisions.
The supply of your personal data is partly prescribed by law (e.g. by tax provisions) or results from contractual arrangements (e.g.information on a contract partner) It may also be necessary for the conclusion of a contract that you supply personal data to us which must subsequently be processed by us. The non-supply of personal data would mean that a contract with you could not be concluded. If you are unwilling to submit your personal data in such a case, you may contact the Controller as per Item 1 also by regular mail or e-mail. We will clarify on a case-by-case basis whether the supply of the personal data is legally or contractually required or needed for contarct conclusion, whether there is an obligation to supply the personal data and the possible consequences of a non-supply of the data.
We maintain the present Data Protection Note at all times up-to-date. Thus it may be necessary to adapt it to actual or legally required changes in framework conditions. These updates are accepted with the use of our website.

References: Art. 51
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 21
 Art. 6
 Art. 6