Source: https://www.ducktape.eu/fr/politique-de-confidentialite
Timestamp: 2019-04-22 14:08:26+00:00

Document:
As a basic principle, we process personal data only to the extent necessary to provide a functioning website with respect to our content and services. The processing of personal data takes place only with the consent of the user or in those cases in which obtaining prior consent is not possible due to technical reasons and the processing of the data is permitted by law.
Art. 6 para. 1 lit. a, EU General Data Protection Regulation (GDPR) serves as the legal basis to the extent we obtain the consent for processing the personal data of the data subject.
Art. 6 para. 1, sentence 1 lit. b GDPR serves as the legal basis for the processing of personal data required for performance of the contract if the party to the contract is the data subject. This also applies to processing operations required to carry out pre-contractual actions.
Art. 6 para. 1 lit. c GDPR serves as the legal basis to the extent processing of personal data is required to fulfill a legal obligation to which our company is subject.
Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis for processing if processing is necessary to protect the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the person whose data is being processed do not predominate.
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. However, data storage may extend beyond this period if such is stipulated under European, domestic, EU laws or other regulations to which the controller is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Each time our website is accessed, our system automatically collects data and information from the computer system of the visiting computer.
The data is also stored in log files of our system. This does not include the IP addresses of the user or other data which allow the identification of the user. A storage of this data together with other data of the user does not take place.
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. For this to occur, the user's IP address must be stored for the duration of the session. Storage takes place with log files to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information related systems. An evaluation of the data for marketing purposes does not take place in this context. For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
The data will be deleted as soon as it is no longer required for the purpose it was collected. This is the case after each session is completed if data is collected for providing the website.
The data is also deleted after a maximum of seven days if the data is stored in log files. A storage period beyond this is also possible. In this case, the IP addresses of users are deleted or distorted so that they no longer can be traced to the visiting client.
The collection of data for the provision of the website and the storage of the data in log files is essential for proper operation of the website. Therefore, the user has no right to object to the collection of this data.
The legal basis for the processing of personal data using cookies is Art. 6, para. 1 lit f. GDPR.
Within the login-process the user’s consent is received for the purpose of data processing and thereby the user is referred to the Data Protection Policy.
There is no transfer of data to third parties in this connection. The data is used exclusively for sending the newsletter.
The legal basis for the processing of the data transmitted is Article 6 para 1 lit. a GDPR.
The collecting of data is solely used for sending the newsletter. The other personal data processed during the sending process serve to avoid an abuse of the contact form and to ensure the safety of our information technology system.
The data will be deleted as soon as it is no longer required for the purpose it was collected for. The user’s email-adress is stored as long as the user’s subscription is active.
The subscription of the newsletter can be cancelled by the user at any time. For this purpose the user finds a corresponding link in every newsletter.
Hereby the revocation of the consent for storing the personal date collect during login process.is possible as well.
Within the contacting process the user’s consent is received for the purpose of data processing and thereby the user is referred to the Data Protection Policy.
There is no transfer of data to third parties in this connection. The data are used exclusively for the processing of the conversation.
In case of a consent the legal basis for the processing of the data transmitted when sending an E-Mail is Article 6 para. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted when sending an E-Mail is Article 6 para. 1 lit. f GDPR. If the objective of the E-Mail is to conclude a contract, then the legal basis for processing is also Art. 6 para. 1 lit. b GDPR.
The processing of personal data is used solely to process the contact. The required legitimate interest in the processing of the data also applies to a contact via E-Mail.
The other personal data processed during the sending process serve to avoid an abuse of the contact form and to ensure the safety of our information technology system.
The data will be deleted as soon as it is no longer required for the purpose it was collected for. For the personal Date collected from the input mask and for the personal data from the E-Mail this is the case after the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have finally been clarified.
The date stored at the time of sending the information are deleted not later than the expiry of the deadline of 7 days.
At any time, the user has the option to revoke his consent to the processing of his/her personal data. If the user contacts us by E-Mail, he may object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
The revocation of the consent and the objection of storage is possible verbally, in writing or by E-Mail.
All personal data stored during the contact will be deleted in this case.
The legal basis for the processing of the users' personal data is Art. 6, para. 1 lit. f GDPR.
The processing of users' personal data enables us to analyze the surfing behavior of our users. By analyzing the obtained data, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.
For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR. The anonymization of the IP address adequately considers the interest of users and the protection of their personal data.
Users may also prevent the collection of the cookie-generated and website-related data (including IP address) from Google and the processing of such data by Google by downloading and installing this browser add-on.
Opt-out cookies prevent the future collection of user data when visiting this website. To prevent Universal Analytics from collecting data from multiple devices, users must execute opt-out on all their systems.
The Google Marketing Services allow us to target the use advertisements for us and on our website so that ads are only displayed that potentially match the interests of the user.
For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
According to their own information, the log data collected by Google is anonymized by deleting a part of the IP address and the cookie information after 9 and 18 months respectively. Further information can be found by user here.
If users want to object to interest-based advertising through Google Marketing Services, they can do this via The Google settings and Opt-Out Options.
We use social plugins ("plugins") of the social network Facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). The plugins can represent interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white "f" on blue tile, the terms "Like", "Like" or a "Thumbs up" sign) or are marked with the addition "Facebook Social Plugin." The list and appearance of Facebook social plugins can be viewed here. The plugins will not be activated until you click on the corresponding button. The plugins are inactive if these are grayed out. You have the option to activate the plugins one-time or permanently. Facebook is certified under the Privacy Shield Agreement, which guarantees compliance with the European Data Protection Law. If a user selects a feature from this online offer that includes such a plugin, their device establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to the device of the user and then integrated in the online offer. At this time, user profiles can be created from the processed data. We have no influence on the amount of data that Facebook collects with the help of this plugin and therefore can only inform the users according to our knowledge. By linking the plugins, Facebook receives the information that a user has accessed the respective page of the online offer. If the user is logged in to Facebook, Facebook can associate the visit to his Facebook account. If users interact with the plugins, for example, press the “Like” button or leave a comment, the information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will learn their IP address and then store it. According to Facebook, only an anonymous IP address is stored in Germany. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for protecting users' privacy, can be found in Facebook's Data Protection Policy Information.
The Facebook Social Plugins show us the interests of the visitors and allows us to target these interests for display on our website and present users only information that potentially correspond to their interests. For these purposes, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
According to their own information Facebook stores the date and time of the visit, the specific Internet address on which the social plugin is located, and other technical data such as the IP address, the browser type, and the operating system for a period of 90 days in order to further optimize the services of Facebook. At the end of the 90 days, the data is anonymized so that it can no longer be associated with users.
If a user is a Facebook member and does not want Facebook to collect data about him through this online offer and associate it with his membership data stored on Facebook, he must log out of Facebook and delete its cookies before using our online offer. Other settings and objections to the use of data for advertising purposes are possible within the Facebook Profile Settings or via the US American Website or the EU Website. The settings are platform-independent, which means they are applied to all devices, such as desktop computers or mobile devices.
On our website, we use Google Maps (API) from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. By using this service, users, for example, will see our location or that of our affiliates and receive directions to help them find the location.
As soon as you visit the sub-pages in which the map of Google Maps is integrated, information about the use of our website (such as the IP address) is transmitted to Google's servers in the USA and stored there. This is done regardless of whether Google provides a user account on which users are logged in, or whether no user account exists. When users log in to Google, their data is correlated directly with their account. If users do not want to correlate with their profile on Google, they must log out before activating the button. Google stores the data (even for non-logged in users) as usage profiles and evaluates them.
Our purpose is to integrate a dynamic map into our online presence. Therefore, our legitimate interest also comprises the processing of the data according to Art. 6 para. 1 lit. f GDPR.
According to their own information, the log data collected by Google is anonymized by deleting a part of the IP address and the cookie information after 9 and 18 months respectively. Further information can be found by users here.
We use the "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). Facebook is certified under the Privacy Shield Agreement, which guarantees compliance with the European Data Protection Law. Facebook pixel allows Facebook to identify those who visit our online offer as a target group in order to display corresponding advertisements (so-called "Facebook ads"). The Facebook pixel is integrated when selecting our website directly through Facebook and can store on the device of the user, a so-called cookie or small file. If users subsequently log in to Facebook or visit Facebook in the logged-in state, the visit to our online offer is recorded in the profile. The data collected about users are anonymous to us, and therefore do not provide us with any conclusions as to the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we should transmit data to Facebook for comparison purposes, it will be encrypted locally in the browser and then sent to Facebook via a secure https connection. This is done solely for the purpose of making a comparison with the data that is equally encrypted through Facebook. The processing of the data by Facebook is part of Facebook's data usage policy. Corresponding general instructions for the presentation of Facebook Ads can be found in the Data Use Policy of Facebook . Special information and details about the Facebook Pixel and how it works can be found in the Help Section of Facebook.
We use the Facebook Pixel to display our Facebook ads only to those Facebook users who have shown an interest in our online offer or those who exhibit characteristics (for example, interests in specific topics or products based on the websites the user has viewed). We then transmit these users to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of users and are not annoying. With the help of the Facebook Pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes, by seeing if users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
According to their own information Facebook stores the date and time of your visit, the specific Internet address on which the social plugin is located, and other technical data such as the IP address, the browser type, and the operating system for a period of 90 days in order to further optimize the services of Facebook. At the end of the 90 days, the data is anonymized so that it can no longer be associated with you.
Users can request a confirmation from the controller, as to whether or not personal data concerning themselves is being processed by us.
7.All available information on the source of the data if the personal data is not collected from the data subject.
8.The existence of automated decision-making including profiling according to Art. 22 para. 1 and 4 GDPR and, at least in these cases, meaningful information about the logic involved, and the scope and intended impact of such processing on the date subject.
Users have the right to request information on whether the personal data concerning themselves is transferred to a third country or to an international organization. Users may demand to be informed of appropriate guarantees according to Art. 46 GDPR in connection with the transfer.
Users have a right to rectification and/or completion towards the controller, if the processed personal data concerning themselves is incorrect or incomplete. The controller must make the corrections immediately.
4.If users have objected to the processing of data according to Art. 21 para. 1 GDPR and it is not yet certain whether the legitimate reasons of the controller outweigh the rights of the user.
If the processing of personal data concerning users has been restricted such data - apart from its storage - may only be used, with the consent of or for the purposes of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of significant public interest of the European Union or a Member State.
If restriction to process data has been inhibited under the above conditions, users will be notified by the controller before the restriction is lifted.
1.Personal data concerning users is no longer required for the purposes it was collected or otherwise processed.
2.Users revoke their consent to the processing of their data, which was based on Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. GDPR, and there is no other legal basis for processing.
3.Users object to the processing of their data according Art. 21 para. 1 GDPR and there are no overriding legitimate grounds to continue processing, or they object according to Art. 21 para. 2 GDPR.
4.Personal data concerning users has been processed unlawfully.
5.The deletion of the users' personal data is necessary for compliance with a legal obligation under European Union law or the law of the Member States, to which the controller is subject.
6.Personal data concerning users was collected with respect to information society services offered according to Art. 8 para. 1 GDPR.
If the controller has publicized personal data concerning the users but is now obliged to delete this data in accordance with Art. 17 para. 1 of the GDPR, he shall take appropriate measures considering the available technology and the cost of implementation, to inform those who process your personal data, that your request to delete any links to such personal data or copies or replications of such personal data has been received.
2.To fulfill a legal obligation required by the law of the European Union or of the Member States to which the controller is subject, or to perform a task of public interest or in the exercise of official authority conferred on the controller.
If users have the right to rectify, delete or restrict the processing of data towarss, the latter is obliged to notify all recipients who have received personal data relating to users, which has been corrected or deleted or processing restricted, unless this proves to be impossible or involves a disproportionate level of cost.
Users have the right to be informed by the controller about these recipients of data.
2.Processing takes place using automated procedures.
In exercising this right, users also have the right to request that personal data relating to themselves be transmitted directly from one controller to another, if technically feasible. In doing so, freedoms and rights of other persons may not be impaired. The right to data portability does not apply to the processing of personal data required for the performance of a task in the public interest or in the exercise of official authority delegated to the controller.
Users have the right, for reasons of their own special circumstances, to object at any time to the processing of personal data relating to themselves in accordance with Article 6 para. 1 lit. e or f of the GDPR; this also applies to profiling based on these provisions.
The controller will no longer process personal data concerning users unless he can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the users, or the processing is intended to assert, exercise or defend legal claims. If the personal data relating to the users is processed in order to operate direct mail, users have the right to object at any time to the processing of the personal data concerning themselves for the purpose of such advertising; this also applies to profiling to the extent it is associated with such direct mail. If users object to the processing of data for direct mail purposes, the personal data of the date subject will no longer be processed for these purposes. Users have the option in connection with the use of information society services - regardless of Directive 2002/58/EC - to exercise their right by means of automated processes in which technical specifications are used.
Users have the right to revoke their data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing of data carried out on the basis of consent up until revocation.
1.Is necessary for the conclusion or performance of a contract between the user and the controller.
However, these decisions may not be based on special categories of personal data according to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and reasonable measures have been taken to protect the rights and freedoms as well as the legitimate interests of the users.
With regard to the cases referred to in (1) and (3), the controller shall take appropriate measures to safeguard the rights and freedoms and legitimate interests of the users including at least the right to intervene, to express an opinion and to contest the decision made by the controller.
Without prejudice to any other administrative or judicial remedy, users shall have the right to complain to a supervisory authority, in particular in the Member State of their residence, place of work or place of alleged infringement, if they consider that the processing of their personal data violates the GDPR.
The supervisory authority to which the complaint has been submitted shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 of the GDPR.

References: Art. 6

Art. 6

Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 9
 Art. 9
 Art. 78