Source: https://web.atento.me/en/privacy-policy/
Timestamp: 2019-05-21 19:50:07
Document Index: 766122046

Matched Legal Cases: ['Art. 4', 'Art. 15', 'Art. 16', 'Art. 17', 'Art. 18', 'Art. 20', 'Art. 21', 'Art. 77', '§ 147', '§ 257', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 44', 'Art. 6', 'Art. 6', 'Art. 6']

Data Protection - Innovative Digital Gift Card Solutions - Atento.me
Payment data (e.g., bank details, payment history) from our customers, prospects and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
For the terms used (eg “Personal data”, “Processing”, “Pseudonymisation”, “Profiling”, “Responsible” and “Processor”) we refer to Art. 4 GDPR.
In summary, the data processing by us are based on the following legal bases, depending on the respective circumstances:
Fulfillment of our contractual obligation (Article 6 (1) (b) GDPR)
Legal obligations, in particular retention obligations (Article 6 (1) (c) GDPR)
Our main legitimate interest (Article 6 (1) (f) DSGVO)
Consents (Article 6 (1) (a) and Article 7 GDPR).
According to Art. 15 GDPR, they have the right to obtain information against the person responsible for the processing of personal data.
According to Art. 16 GDPR, they have the right to correct inaccurate personal data concerning them.
According to Art. 17 GDPR, they have the right to be deleted (“right to be forgotten”).
According to Art. 18 GDPR, they have the right to restrict processing.
They have the right to data transmission in accordance with Art. 20 GDPR.
According to Art. 21 GDPR, they have the right to object to the processing.
According to Art. 77 GDPR, they have the right to complain to a supervisory authority.
Deletion, limited processing and storage
All data will be deleted in a timely manner as soon as the intended purposes are achieved. For this a regular check takes place.
The immediate deletion is regularly opposed by statutory retention requirements, in particular §§ 147 para. 1 AO, 257 para. 1 No. 1 and 4, para. 4 HGB (10 years) and § 257 para. 1 No. 2 and 3, para. 4 HGB (6 years).
Unless the data is deleted because it is required for other and legitimate purposes, its processing will be restricted with the result that the data will be blocked and not processed for any other purpose.
Calling the website and cookies
When visiting our website, we collect connection data or meta / communication and usage data. These are necessary in order to be able to present the offer at all or in the respective form and with appropriate performance.
We and third parties commissioned by us also use cookies. This information is transferred from our web server or third-party web servers to users’ web browsers and stored there for later retrieval.
Cookies are used, for example, to fully enable the use of the online offer and to improve and personalize the online offer, for example by automatically providing the website operator with certain data about their terminal device and the Internet connection.
Cookies are stored on your computer. You have the possibility to see the storage duration of a stored cookie in your system.
It is also possible to use the website without cookies. Saved cookies can be deleted in the system settings of the browser. The deactivation settings can be found in the system settings of your browser or device. However, the use of the website may be restricted if you have restricted or deactivated the use of cookies.
The basis for the collection of data when the website is accessed and the use of cookies is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO as well as your consent pursuant to Art. 6 para. 1 lit. a GDPR.
Ordering and User Accounts
We process the data of our users during order processes in our online offer to enable them to select and order the selected products and services, as well as their payment and delivery, or execution. Optionally, a user account can be created here.
We store and process data in the specified scope. This can be in particular the following data:
• communication data
• Payment details (note about payment services)
• Further data during registration are the IP address and time of the respective user action
All data necessary for delivery or contract execution will be passed on to third party service providers at the time of delivery or contract execution.
The legal basis for the processing of the data, in particular with regard to the user account, is your consent in the context of the registration Art. 6 para. 1 lit. a GDPR. With regard to the data that is the fulfillment of the contract of which the user is a party or the implementation of pre-contractual measures, the legal basis Art. 6 para. 1 lit. b DSGVO. Further data is collected in accordance with Art. 6 para. 1 lit. f DSGVO to protect against misuse and other unauthorized use.
If you contact us, for example via contact form, e-mail, telephone or social media, your details will be stored so that they can be used to process and answer your request.
The collection and processing of personal data takes place in accordance with Art. 6 para. 1 lit. a DSGVO or Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in responding to your contact request quickly and reliably. Insofar as the collection of the contact data serves to fulfill the contract, the additional legal basis for processing the data is Art. 6 para. 1 lit. b DSGVO User information can be stored in a Customer Relationship Management System (“CRM System”) or comparable request organization.
Once the data for the request is no longer required, they are deleted. In addition, every two years the necessity is checked, while respecting the statutory retention requirements.
Relationship with order processors and third parties
If, in the context of our processing, we disclose data to other persons and companies (order processors or third parties), transmit them to them or otherwise grant access to the data, this is done only on the basis of a legal permission (eg if the data is transmitted to Third parties, as to payment service providers, pursuant to Art. 6 (1) (b) DSGVO is required to fulfill the contract), you have consented to a legal obligation or on the basis of our legitimate interests (eg the use of agents, webhosters, etc.). ).
The processing of data in a third country (ie outside the European Union (EU) or the European Economic Area (EEA)) or the use of third party services or disclosure or transmission of data to third parties is only to the extent that it is necessary to fulfill the (pre) contractual Duties, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only in the presence of the special conditions of Art. 44 et seq. DSGVO.
At present, we use service providers in the US who submit to the Privacy Shield. By calling the website (https://www.privacyshield.gov/EU-US-Framework) it is possible to call up the status of the respective service provider and further information by means of a search function.
As part of our business, we continuously use providers to manage administrative and organizational tasks. All data collected by us, but in particular contract and payment data, may be affected. Insofar as this is required by the provisions of data protection law, this is done in the context of order data processing. Basis for the processing is regularly our justified interest (kind 6 exp. 1 lit. f. DSGVO).
We use the payment service providers […].
As part of the ordering process, users are required to fulfill the contract in accordance with Art. 6 para. 1 lit. b DSGVO forwarded to this. Incidentally, we use external payment service providers on the basis of our legitimate interests. Art. 6 para. 1 lit. f. DSGVO in order to offer our users effective and secure payment options.
This includes in particular the transfer to […] for the purpose of processing the order and payment. The transferred data may be used by the third party exclusively for the stated purposes.
The payment service providers collect from you data such as name, address, bank details (account numbers or credit card numbers, passwords, TANs and checksums) as well as the contract, summary and recipient-related information to process the transactions. We only receive information about the status of the payment. If necessary, the payment service providers and other service providers process the data further for the purposes of identity and credit checks. Please take note of the respective terms and conditions and privacy policy:
We use various offers from Google Inc. on our website (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”):
reCAPTCHA: The query is for the purpose of distinguishing the input is by a human or automated, machine processing. The query includes the sending of the IP address and any other data required by Google for the reCAPTCHA service to Google. For this purpose, your input needs to be translated to Google and used there. However, your IP address will be shortened by Google within member States of the European Union or other Contracting states of the European Economic Area. Only in exceptional cases does the full IP address be sent to a Google server in the US and shortened there. Google wants to use this information on behalf of the operator of this website to evaluate your use of this service. The IP address sent by your browser as part of reCaptcha will not be merged with other data provided by Google. If necessary, your data also wants to be transmitted to the USA. For data transfers to the US, there is an adequacy decision of the European Commission, the “Privacy Shield”. Google participates in the “Privacy Shield” and has submitted to the specifications. By pressing the query, you consent to the processing of your data. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time,
Google Analytics: a web analytics service provided by Google LLC (“Google”). The information generated by the cookie about the use of the online offer by the users will be used on our behalf to evaluate the use of our online offer by the users, to compile reports on the activities within this online offer and to further, with the use of this online offer and the internet use related services to provide us. In this case, pseudonymous usage profiles of the users can be created from the processed data.
Adwords: We use Google’s online AdWords marketing tool “AdWords” to place ads on the Google advertising network (eg, in search results, in videos, on websites, etc.) so that they are displayed to users who have a suspected interest in the ads to have. This allows us to more specifically display ads for and within our online offering so that we only present ads to users that potentially match their interests. If a user e.g. Showing ads for products he’s been looking for on other online offers is called remarketing. For these purposes, upon access to our and other websites where the Google Advertising Network is active, Google will immediately execute a Google code and become so-called (re) marketing tags (invisible graphics or code, also known as “).” Web beacons “) incorporated into the website. With their help, the user is provided with an individual cookie, i. a small file is saved (instead of cookies, comparable technologies can also be used). In this file is noted which websites the user visited, for what content he is interested and what offers the user has clicked, as well as technical information about the browser and operating system, referring websites, visit time and other information on the use of the online offer.
We use the online exception handling program “Airbrake” on our website and, in this context, for bug testing. Airbrake is service provided by Airbrake Inc. (535 Mission Street, 14th floor, San Francisco, CA 94105). The web platform is continuously monitored and tracked in order to find errors and allow the bug fixing.
Airbrake also maintains GDPR compliance. For our EU customers we offer a Data Protection Addendum available by contacting [email protected]
Users of our website have the opportunity to use social media plugins to share content on our website. Below is a comprehensive listing of the social networks we use. When used, i. Click on the respective share button, personal data will be transmitted to the respective plugin provider and stored there, especially if you are logged into the respective account.
In order to prevent that the mentioned social networks collect data about the use of our web pages, do not click on the named buttons or log out additionally before visiting our page from the respective accounts. We have no control over the collected data and processing and no knowledge of the full extent of the data collection, the purpose of processing and the retention periods. The plug-in providers can inform the user about the processing of data:
• Google / YouTube https://policies.google.com/privacy
• Instagram http://instagram.com/about/legal/privacy/
• Pinterest https://about.pinterest.com/en/privacy-policy.
We use Google Inc.’s Embed Google Maps feature on our website (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”).