Source: https://www.kottmann.eu/en/data-protection/
Timestamp: 2020-07-16 13:55:24
Document Index: 732378146

Matched Legal Cases: ['Art. 44', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 7', 'Art. 6']

Data protection – Kottmann
Link to the imprint: https://www.kottmann.eu/en/imprint
If, as part of our processing, we disclose data to other people and companies (processors, jointly responsible or third parties), transfer them to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the data is transmitted to third parties, such as payment service providers, is necessary for the fulfillment of the contract), users have consented, a legal obligation provides for this or based on our legitimate interests (e.g. when using agents, web hosts, etc.).
If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA) or the Swiss Confederation) or as part of the use of third-party services or disclosure or transmission of data to other people or companies happens, this only happens if it happens to fulfill our (pre) contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to express consent or contractually required transmission, we process or leave the data only in third countries with a recognized data protection level, to which the US processors certified under the “Privacy Shield” belong or on the basis of special guarantees, such as process contractual obligations through so-called standard protection clauses of the EU Commission, the presence of certifications or binding internal data protection regulations (Art. 44 to 49 GDPR, information page of the EU Commission).
If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. That the data will be blocked and not processed for other purposes. This applies e.g. for data that must be kept for commercial or tax law reasons.
We use external payment service providers, the platforms of which users and we can carry out payment transactions. These payment service providers may include, each with a link to the data protection declaration: PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de / data protection /), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https: / /www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/content/privacy- policy-statement.html), Stripe (https://stripe.com/de/privacy).
The data processed by the payment service providers include inventory data, such as the name and address, bank details, such as Account numbers or credit card numbers, passwords, TANs and checksums as well as the contract, sums and recipient-related information. The information is required to complete the transactions. However, the data entered will only be processed and saved by the payment service providers. That we do not receive any account or credit card-related information, only information with confirmation or negative information about the payment. The data may be transmitted by the payment service provider to credit agencies. The purpose of this transmission is to verify identity and creditworthiness. For this we refer to the terms and conditions and data protection notices of the payment service providers.
When contacting us (e.g. via contact form, e-mail, telephone or via social media), the information provided by the user for processing the contact request and processing it in accordance with. Art. 6 para. 1 lit. b. (within the framework of contractual / pre-contractual relationships), Art. 6 para. 1 lit. f. (other inquiries) GDPR processed .. The information provided by the users can be stored in a customer relationship management system (“CRM system”) or comparable inquiry organization.
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.
If we ask the user for consent (e.g. in the context of a cookie consent), the legal basis for this processing is Art. 6 Para. 1 lit. a. DSGVO. Otherwise, the personal data of the users are processed on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. GDPR).
As far as data is processed in the USA, we would like to point out that Google is certified under the Privacy Shield Agreement and thereby guarantees that it will comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active) ,
We use Google Analytics in the form of “universal analytics”. “Universal Analytics” refers to a process by Google Analytics in which the user analysis is based on a pseudonymous user ID and a pseudonymous profile of the user is created with information from the use of different devices (so-called “cross-device tracking”).
We use the Jetpack plugin (here the sub-function “WordPress Stats”), which integrates a tool for statistical evaluation of visitor access and from Automattic Inc., 60 29th Street # 343, San Francisco, CA 94110, USA. Jetpack uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website.
The processing of users’ personal data is based on our legitimate interests in effective information for users and communication with users in accordance with. Art. 6 para. 1 lit. f. DSGVO. If the users of the respective providers of the platforms are asked for their consent to the data processing described above, the legal basis for the processing is Art. 6 Para. 1 lit. a., Art. 7 GDPR.
We integrate the fonts (“Google Fonts”) from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. According to Google, the user data is used solely for the purpose of displaying the fonts in the user’s browser. The integration takes place on the basis of our legitimate interests in a technically safe, maintenance-free and efficient use of fonts, their uniform representation and consideration of possible licensing restrictions for their integration. Data protection declaration: https://www.google.com/policies/privacy/.
We integrate the maps of the “Google Maps” service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The processed data can include, in particular, IP addresses and location data of the users, which, however, are not collected without their consent (usually carried out as part of the settings of their mobile devices). The data can be processed in the USA. Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.
On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. GDPR), we use social plugins (“plugins”) from the social network facebook.com, which operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland (“Facebook”).
Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenk