Source: http://vallone.de/en/privacy-policy/
Timestamp: 2019-04-19 06:55:34+00:00

Document:
We process your data always in accordance with the legal regulations, in particular with the German Telemedia Act, theRegulation (EU) 2016/679 General Data Regulation (GDPR) of the European Parliament and of the Council of 27 April 2016 onthe protection of individuals withregard tothe processing ofpersonaldata, and on the free movement of such dataand repealing Commission Directive 95/46/EG (Basic Regulation on data protection) and in accordance with the German Federal Data Protection Act, as far as this still applies.
(1) This data privacy statement gives an overview,which information is collected or stored when you visit our website and how it is used.This statement also explains how to verify the accuracy of the personal information we hold about you and how to delete, block or update such personal information in our database.
(2) Basically, we process personal data of our users only insofar as this is necessary for a functioning website and for our content and services.Further uses are listed in the following regulations.The processing of personal data of our users takes place only with the consent of the useregularly.An exception applies, if it is not possible to obtain prior consent for factual reasons and data processing is permitted by law.
Insofar as we obtain the consent of the data subject for processing of his or her personal data, Art. 6 (1) (a) GDPR is the legal basis. In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b)GDPRis the legal basis. This also applies to processing operations, which are necessaryfor the implementation of pre-contractual measures. Insofar as data processing is necessary for compliance with a legal obligation, Art. 6 (1)(c)GDPR is legal the basis. In case data processing is necessaryin order to protect the vital interests of the data subject or of another natural person, Art. 6 (1) (d)GDPR is the legal basis. If processing is necessaryto safeguardthe legitimate interests of our company or a third partyandinterestsor fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPRis the legal basis for the data processing.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is omitted.In addition, such storage may be provided because theEuropean or national legislator set such in EU regulations, laws or other regulations to which the controller is subject.Blocking or deletion of the data also takes place when a storage period prescribed by the regulations mentioned expires, unless there is a need for further data storage for conclusion of a contract or performance of the contract.
Your personal data will not be transferred to third parties outside the company without your explicit consent. External service providers, who process data on our behalf, are contractually obliged.These service providers are especially prohibited from using your data for other than the original underlying purposes.
We will provide third parties with furtherdata thanprovided by you, in particular to such data you have made available to usjust for handling of the contract for internal purposes, only in case of a corresponding statutory obligation or to safeguard legitimate interests.
Due to legal requirements, especially for tax purposes, we may be obliged to store your data beyond the period of your use of our website.However, we will only store the data to the extentrequired, taking into account the statutory provisions.
Your data will be processed on servers located in Germany and thus within the scope of the EU level of data protection.We must point out any exemptions accordingto no. 3 of these regulations.
We are not able to assign these data to specific persons.A collection of this data with other data sources is not done, the data also is deleted after a statistical evaluation.For this purpose, the user’s access to our websites, including the IP address, is stored in the server log files.These log files are prepared monthly for statistical evaluations with an analysis software and then deleted.It is not possible for us to draw conclusions concerning a certain person when using the data.
(3) The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user’s computer.Therefore, the user’s IP address must be stored for the duration of the session.In these purposes, our legitimate interest of data processing is justified in the sense of Art. 6 (1) (f) GDPR.
(4) The data will be deleted as soon as it is no longer necessary for the purpose it was collected for.Incase of data collection for providing the website, this is the case when the respective session is completed.
(5) The date collection for the providing the website and the storage of the data in log files is essential for the operation of the website.As a result, the user has no possibility to object.
(1) Some of our website features ask the user to enter personal data, such as name, e-mail or postal address.Entering names and details is voluntary here.The data processing is preceded by the consent of the user, Art. 6 (1) (a) GDPR, or a voluntary basis.
(2) The processing of the above-mentioned data takes place on the basis of Art. 6 (1) (b) GDPR for that matter.The data processing is necessary for contact for contracting, the fulfilment of a possible contract, or of other pre-contractual measures given.If there should be a legal obligation requiring the personal data processing, such as the exercise of tax obligations, the basis for the processing is Art. 6 (1) (c). GDPR.
This website uses the feature “demographics” of Google Analytics. Therefore, reports can be created that contain statements on the age, gender and interests of the website visitors.This datahas been obtained from interest-based advertisingby Google and third-party visitor data. This data cannot be associated to identify a certain person. You can disable this feature at any time via the ad settings in your Google Account, or generally prohibit the collection of your data by Google Analytics as described in the section “Opposition to Data Collection”.
We point out that refusing such advertisements does not remove ads from the pages you visit. It simply means that the ads shown to you are not necessarily matched to your personal interests.
But we neither use the so-called “custom audience” feature, nor an “advanced comparison” or “look-alike audiences”, so that we do not provide Facebook with our own customer data to populate its database.
(5) Google Adwords Remarketing / Display Advertisment.
If you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here the YouTube server is informed about which of our pages you have visited. If you’re logged in to your YouTube account, YouTube allows you to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 (1) (f) GDPR. Further information about handling user data, can be found in the data protection declaration of YouTube under https://www.google.de/intl/de/policies/privacy.
Among other things, we offer payment via payment services on our website. If you choose to pay by using a payment service (such as PayPal, Paymill, or Amazon Pay), the payment details you enter will be sent to the payment service that collects your data. A revocation does not affect the effectiveness von of data-processing operations in the past. The payment service provider sets a cookie as soon as you activate payment via the provider. In this case, your data will be transferred on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). You have the possibility to revoke your consent to data processing at any time.
The social media icons are just links. There is no integration of the tools in our website.
(8)The utilization of data from set cookies is done on the basis of Art. 6 f) GDPR for the protection of legitimate interests, whereas we assume that your interests, fundamental rights and freedoms are not restricted by this, as personal data is neither gained by us nor by third parties. Additionally, it is basically statistical data adjusted to your user behavior and, if necessary, other factors like pricing, but not data that may lead to an individual identification.
(2) Alternatively, contact via the provided e-mail address is possible. In this case, the user’s personal data transmitted by e-mail will be stored.
(4) Legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPRin case of consent of the user.
(5) The legal basis for the processing of the data transmitted in the course of sending an e-mail is article 6 (1) lit. f GDPR. If the e-mail contact aims to conclude a contract, then additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
(8) The user has the possibility to give his consent to the processing of the personal data by means of communication by e-mail or post to the responsible office (see below) at any time.
(2) You may revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
(1)Depending on the current design of the website and the offer, we offer our usersthe opportunity to register on our website by providing personal information. The data is entered into an input mask, transmitted to us and stored. A transfer of data to third parties does not take place. The registration will only collect the data necessary for the purpose of the registration.
(2) As part of the registration process, the consent of the user to process this data is obtained. Legal basis for the processing of the data is the presence of the consent of the user Art. 6 para. 1 lit. a GDPR. If the registration serves the fulfillment of a contract of which the user is a party or the implementation of pre-contractual measures, an additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
(8) the existence of automated decision-making, including profiling, referred to in Art. 22(1) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information, if your personal have been transferred to third countries or international organisations.In this connection, you can request the appropriate guarantees in accordance with. Art. 46 GDPR in connection with the transfer.
If you have obtained restriction of processing pursuant to the above-mentioned conditions,you will be informed by the controller before the restriction of processing is lifted.
(6) Your personal data have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
If you have asserted the right to rectification, erasureor restriction of processing to the controller, the controller hasto communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
In exercising these rights,you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.Rights and freedoms of othersshall not be affected by that.
Where you object to processing for direct marketing purposes,your personal data are no longer processed for such purposes.
You have the right to revoke your declaration of consent under data protection law at any time.The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
But these shall not be based on special categories of personal data referred to in Art. 9(2)1) GDPR, unless Art. 9 (2) (a) or (g) of GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.In the cases referred to in points (1) and (3), the data controller implements suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 8
 Art. 9
 Art. 9