Source: http://aesir-interactive.com/privacy-policy/
Timestamp: 2019-04-24 04:55:10+00:00

Document:
Below we explain to you which personal data is collected and processed by us when using our services and offers.
Personal data are individual details about personal or factual circumstances of a specific or identifiable natural person, this means all information that relates to a person.
• Consent according to Article 6 paragraph 1 (a) General Data Protection Regulation (GDPR). Consent is any voluntary expression of intent, in an informed and unequivocal manner, in the form of a statement or other unambiguous confirmatory act, which indicates that the data subject consents to the processing of his personal data.
• Necessity to fulfill the contract or carry out preparatory actions in accordance with Article 6 para. 1 (b) GDPR, this means that the data is required so that we can fulfill the contractual obligations to you or we need the data to prepare a contract closure with you.
• Processing to fulfill legal obligations under Article 6 para. 1 (c) GDPR, this means that a processing of the data is required by law or other regulations.
• Processing for the protection of legitimate interests in accordance with Article 6 para. 1 (f) GDPR, this means that processing is necessary to safeguard legitimate interests on our part or by third parties, unless the interests or fundamental rights and freedoms on your part that require the protection of personal data prevail.
Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, employment or the place of the alleged infringement, if you believe that the processing of the personal data is violating the GDPR.
The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage is deleted. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws or other regulations to which the processor is subject. Blocking or deletion of the data also takes place if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for conclusion of a contract or fulfillment of the contract.
The data is stored in the log files of our system. A storage of this data together with other personal data of the user does not take place. The is stored with our hosting provider alfahosting who processes the data exclusively inside the EU.
The legal basis for processing the data is Art. 6 para. 1 (f) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR therefore lies in the functionality of our website and its availability.
Legal basis for the transfer of data to the hosting provider is Art. 28 GDPR.
The temporary storage of the IP address by the system is necessary to allow delivery of the website to the computer of the user. To do this, the user’s IP address must be kept for the duration of the session.
The data is stored in order to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The log files will be deleted after 30 days at the latest, unless there is a need to keep the data for the aforementioned purpose due to specific events.
Storage beyond that is possible. In this case, the IP addresses of the users are deleted or anonymised, so that an assignment to a specific user is no longer possible.
The collection of data for the provision of the website and the storage of the data in log files is essential for the operation of the website. There is consequently no possibility of objection by the user.
If you purchase goods or services on our website and provide your email address, we may subsequently use this information to send you product information by email regarding the booked product or similar products of the processor. In such a case, only direct advertising for our own similar goods or services will be sent by email. We will also send you emails related to your transactions, such as order confirmations, shipping notices, invoices etc.
It is possible to subscribe to a free newsletter on our website or in our app, which contains direct advertising for our products or products of our cooperation partners. When you sign up for the newsletter, the data from the input mask will be transmitted to us or the email address already stored will be used. In this case, the date and time of registration for the newsletter and the IP address used are also stored. As part of the confirmation of the newsletter registration, the date and time at which you click on the confirmation link for the newsletter registration as well as the IP address used will also be saved.
The legal basis for the processing of the data when sending out the newsletter due to the prior acquisition of goods or services is Article 6 para. 1 sentence 1 (f) GDPR in conjunction with § 7 para. 3 UWG.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is therefore in direct advertising and the increase in sales to existing customers.
The legal basis for processing the data when registering directly for the newsletter is Art. 6 para. 1 (a) GDPR.
The legal basis for contacting in connection with current bookings is Article 6 para. 1 (b) GDPR.
The legal basis for the transfer of the data to the shipping service provider is Article 28 para. 3, 6 and 7, Article 46 para. 2 (c) GDPR. The standard data protection clauses of the EU Commission are used in contractual relation with the provider.
The purpose of storing the email address is the possibility of electronic contact for advertising purposes. The date and IP address of the registration as well as the confirmation of the registration will be recorded in order to document the consent to the newsletter shipment and to prevent misuse. Furthermore, for information regarding ongoing bookings, the proper execution of the contract is the purpose of the contact.
The transfer to the service provider is done for the purpose of sending the newsletter as a mass mailing.
If we have received your email address as part of the purchase of goods or services, it will be used for the delivery of advertising until you object to further use.
As far as you have expressly consented to the receipt of the newsletter, we will only delete or block the email address for the advertising mailing, if you revoke your consent. The data confirming the order of the newsletter will be stored for the same amount of time.
The emails sent, as far as business letters are concerned, are stored for the duration of retention periods of the Tax Code or the Commercial Code. The further emails are deleted as soon as no further response by the user has to be expected.
You may object or revoke your consent to the use of the email address for advertising purposes at any time, without incurring any costs beyond the charges of your communications tariff. You can object to the use of any advertising mail by clicking on a link provided there with effect for the future. You may also opt-out of advertising for future use by emailing privacy [at] aesir-interactive.com. In the case of opposition by email, the implementation of the cancellation or blocking can take up to 5 working days; In this period, you may still receive advertising emails. You can not contradict the use of the email address for addressing in the context of the performance of the contract. If you no longer wish this, you would have to delete the account or have it deleted, otherwise we would not be able to properly fulfil the contract.
The website has a contact form which can be used for electronic contact. If you enter data in the input mask, these are transmitted to us and stored. This data is: your name, your email address, if necessary your telephone number, the nature of your request and your individual message to us. In addition, the date and time of your message is automatically recorded.
Alternatively, contact via the provided email address is possible. In this case, the user’s personal data transmitted by email will be stored.
The legal basis for the processing of the data transmitted in the course of sending an email is Article 6 para. 1 (f) and if necessary also (a) GDPR. If the email contact aims to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 (b) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR lies in answering a customer inquiry or answering a contact request on other topics.
The purpose of the data storage is the contact at the request of the communication partner.
The data will be stored for as long as necessary to complete the request. Insofar as these are commercial letters subject to commercial and tax law, these are also stored in accordance with the statutory retention periods.
You have the option at any time to revoke your consent to the processing of personal data with effect for the future or to object to further use. The contradiction can be explained by email to: privacy [at] aesir-interactive.com. A deletion can only take place, as far as no legal storage period is given; in this case, the data will be locked for another use. In such a case, the conversation cannot continue.
The website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). This software collects information about how you use the website and compiles various statistics. The increased usage data include in particular the concrete selection of links, the length of stay on individual pages and the order of use of the website, the frequency of the page request. This data is collected together with your IP address. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
We have activated a so-called IP anonymization on the website, this means that the IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to retransmission to the USA.
Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google itself describes here https://www.google.com/policies/privacy/ its data processing activity.
The legal basis for the processing of data when using the website is Article 6 para. 1 (f) GDPR.
The legitimate interest within the meaning of Art. 6 para. 1 (f) GDPR is a customer-oriented design of the website, which meets the requirements of the users and takes their user preferences into account.
The legal basis for the transfer of data to Google are Article 28 para. 3, and Article 45 para. 3 GDPR. The service provider is certified under the Privacy Shield Framework and is therefore subject to the EU Commission’s decision on adequacy (Implementing Decision 2016/1250), this means that the data protection level of the service provider is recognized as being equivalent to the GDPR, although it is based in the USA.
The purpose of the processing is to analyse this website and the usage behaviour of its visitors.
The data is already anonymized directly after the survey. Personal data is therefore collected only in the context of the transfer and not permanently stored.
You can prevent the collection of the data generated by the cookie and your use (including your IP address) and their transmission to Google as well as the processing of this data by Google by downloading the browser plugin available under the following link and to install: http://tools.google.com/dlpage/gaoptout?hl=de.

References: Art. 6
 Art. 6
 Art. 28
 § 7
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6