Privacy policy
This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the associated websites, functions and contents as well as external online presences, such as our social media profile. (hereinafter jointly referred to as “online offer”). With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Article 4 of the Basic Data Protection Regulation (DSGVO).
The O’Reillys and the Paddyhats GbR
Südstr. 7
58285 Gevelsberg
Shareholder: Franz Wüstenberg, Tim Herbrig, Benny Lunau, Jan Nau, Thomas Klur, Jessica Kohlmetz, Jonas Heinrich
Phone number: +49173/1887678
eMail: info@paddyhats.de
Sales tax identification number: DE305056056
The types of data processed:
– inventory data (e.g., names, addresses).
– Contact details (e.g., e-mail, telephone numbers).
– Content data (e.g., text entries, photographs, videos).
– Contract data (e.g., object of contract, duration, customer category).
– Payment data (for example, bank details, payment history).
– Usage data (e.g., websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).
Processing of special categories of data (Art. 9 para. 1 DSGVO):
No special categories of data are processed.
Categories of data subjects concerned by the processing:
– Customers, interested parties, visitors and users of the online offer, business partners.
– Visitors and users of the online offer.
In the following, we refer to the persons concerned collectively as “users”.
Purpose of the processing:
– Provision of the online offer, its contents and shop functions.
– Provision of contractual services, service and customer care.
– Responding to contact requests and communication with users.
– Marketing, advertising and market research.
– Security measures.
Latest Update: 01/2020
1. Terms used
1.1. “Personal data” shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an on-line identifier (e.g. a cookie) or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
1.2. Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means The term has a broad scope and covers practically every handling of data.
1.3. Controller’ shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data
2.Relevant legal bases
In accordance with Art. 13 DSGVO we inform you about the legal basis of our data processing. If the legal basis is not mentioned in the data protection declaration, the following applies: The legal basis for obtaining consent is Article 6, paragraph 1. 1 lit. a and Art. 7 DSGVO, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering enquiries is Art. 6 para. 1 lit. b DSGVO, the legal basis for the processing for the fulfilment of our legal obligations is Art. 6 para. 1 lit. c DSGVO, and the legal basis for the processing to safeguard our legitimate interests is Art. 6 para. 1 lit. f DSGVO. In cases where vital interests of the data subject or of another natural person make it necessary to process personal data, Article 6(6)(a) of the Directive provides that the processing of personal data is to be carried out in accordance with the principle of proportionality. 1 lit. d DSGVO as legal basis.
3. changes and updates to the privacy policy
We ask you to inform yourself regularly about the content of our privacy policy. We ask you to inform yourself regularly about the content of our privacy policy. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
4. Security measures
4.1. In accordance with Art. 32 DSGVO and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing, as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection commensurate with the risk; these measures include in particular securing the confidentiality, integrity and availability of data by controlling the physical access to the data, as well as the access, input, disclosure, securing of availability and its separation. In addition, we have established procedures to ensure that data subjects’ rights are exercised, data is deleted, and we respond to data threats. Furthermore, we take into account the protection of personal data already during the development or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly presettings (Art. 25 DSGVO).
4.2. The security measures include in particular the encrypted transmission of data between your browser and our server.
5. Disclosure and transmission of data
5.1. If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this will only be done on the basis of a legal authorisation (e.g. if a transfer of the data to third parties, such as payment service providers, in accordance with Art. 6 para. 1 lit. b DSGVO is necessary for the performance of the contract), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, hosting providers, tax, business and legal advisors, customer care, accounting, billing and similar services that allow us to perform our contractual obligations, administrative tasks and duties efficiently and effectively).
5.2. If we commission third parties to process data on the basis of a so-called “contract processing agreement”, this is done on the basis of Art. 28 DSGVO.
6. Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or disclosure or transfer of data to third parties, this will only take place if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or store the data in a third country only if the special requirements of Art. 44 ff. DSGVO. This means, for example, that the processing is carried out on the basis of specific guarantees, such as the officially recognised establishment of a level of data protection equivalent to that in the EU (e.g. for the US through the Privacy Shield) or compliance with officially recognised specific contractual obligations (so-called ‘standard contractual clauses’).
7. Rights of the data subjects
7.1. You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information on such data, as well as further information and a copy of the data in accordance with Art. 15 DSGVO.
7.2. You have accordingly. Art. 16 DSGVO the right to request the completion of data concerning you or the correction of incorrect data concerning you.
7.3. In accordance with Art. 17 DSGVO, you have the right to demand that the data in question be deleted immediately, or alternatively, in accordance with Art. 18 DSGVO, to demand a restriction on the processing of the data.
7.4. You have the right to demand that the data concerning you which you have provided us with be made available to us in accordance with Art. 20 DSGVO and to request that it be passed on to other responsible parties.
7.5. Under Art. 77 DSGVO, you also have the right to lodge a complaint with the competent supervisory authority.
8. Right of withdrawal
You have the right to withdraw consents granted pursuant to Art. 7 Abs. 3 DSGVO with effect for the future.
9. Right of objection
You may at any time object to the future processing of data concerning you in accordance with Art. 21 DSGVO. The objection may in particular be made against processing for direct marketing purposes.
10. Cookies and right of objection for direct advertising
10.1. Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. The primary purpose of a cookie is to store information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online offer and closes his browser. In such a cookie, for example, the contents of a shopping cart in an online shop or a login status can be stored. Cookies are described as “permanent” or “persistent” if they remain stored even after the browser is closed. For example, the login status can be saved if users visit the site after several days. Likewise, the interests of the users can be stored in such a cookie, which are used for range measurement or marketing purposes. Cookies from providers other than the person responsible for operating the website are referred to as “third party cookies” (otherwise, if they are only their cookies, they are referred to as “first-party cookies”).
10.2. We use temporary and permanent cookies and clarify this in the context of our privacy policy.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.
10.3. A general objection to the use of cookies used for online marketing purposes can be raised for a large number of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU-Seite http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in the browser settings. Please note that it may not be possible to use all functions of this online offer.
11. Deletion of data
11.1. The data processed by us will be deleted or restricted in their processing in accordance with articles 17 and 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be stored for commercial or tax law reasons.
11.2. Germany: According to legal requirements, the storage is in particular for 6 years according to § 257 Abs. 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) as well as for 10 years according to § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.)
11.3. Austria: According to legal requirements, the storage is carried out in particular for 7 years in accordance with § 132 para. 1 BAO (accounting documents, vouchers/invoices, accounts, supporting documents, commercial documents, statement of income and expenditure, etc.), for 22 years in connection with real estate and for 10 years in connection with documents relating to electronically supplied services, telecommunications, radio and television services supplied to non-entrepreneurs in EU Member States and for which the Mini-One-Stop-Shop (MOSS) is used
12. Order processing in the online shop and customer account
12.1. We process the data of our customers in the context of the order procedures in our online shop, in order to enable them to select and order the selected products and services, as well as their payment and delivery or execution.
12.2. The processed data includes inventory data, communication data, contract data, payment data, and on the persons concerned our customers, interested parties and other business partners. The processing is carried out for the purpose of providing contractual services in the context of the operation of an online shop, billing, delivery and customer services. We use session cookies to store the contents of the shopping cart and permanent cookies to store the login status.
12.3. The processing is based on Article 6(6). 1 lit. b (execution of ordering processes) and c (legally required archiving) DSGVO. The information marked as required is necessary to justify and fulfil the contract. We disclose the data to third parties only within the scope of delivery, payment or within the scope of legal permissions and obligations to legal advisors and authorities. The data will only be processed in third countries if this is necessary for the fulfilment of the contract (e.g. upon customer request for delivery or payment).
12.4. Users can optionally create a user account, especially by viewing their orders. Within the scope of the registration, the required mandatory data are communicated to the users. The user accounts are not public and cannot be indexed by search engines. If users have cancelled their user account, their data with regard to the user account will be deleted, subject to their retention is required for commercial or tax law reasons. Article 6 (2) 1 lit. c DSGVO necessary. Information in the customer account remains until its deletion with subsequent archiving in case of a legal obligation. It is the responsibility of the users to back up their data in the event of termination before the end of the contract.
12.5. Within the scope of registration and renewed logins and use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. In principle, this data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with the law. Article 6 (2) 1 lit. c DSGVO.
12.6. The deletion is carried out after the expiry of legal warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of legal archiving obligations, the deletion is carried out after their expiry (end of commercial law (6 years) and tax law (10 years) storage obligation); information in the customer account remains until its deletion.
13. Business management analyses and market research
13.1. In order to run our business economically, to identify market trends, customer and user wishes, we analyse the data available to us on business transactions, contracts, enquiries, etc. We process inventory data, communication data, contract data, payment data, usage data, meta data on the basis of Art. 6 para. 1 lit. f. DSGVO, whereby the persons concerned include customers, interested parties, business partners, visitors and users of the online offer. The analyses are carried out for the purpose of business management evaluations, marketing and market research. In doing so, we can take into account the profiles of registered users with details, for example, of their purchase transactions. The analyses serve us to increase user-friendliness, to optimize our offer and business efficiency. The analyses are solely for our benefit and are not disclosed externally, unless they are anonymous analyses with summarized values.
13.2. If these analyses or profiles are personal, they will be deleted or made anonymous upon termination by the user, otherwise after two years from conclusion of the contract. In all other respects, the macroeconomic analyses and general trend determinations are prepared anonymously wherever possible.
14. Contact and customer service
14.1. When contacting us (via contact form or e-mail), the user’s details will be used to process the contact request and to handle it in accordance with the terms of use. Article 6 (2) 1 lit. b) DSGVO
14.2. User information may be stored in our Customer Relationship Management System (“CRM System”) or similar inquiry organization.
14.3. We delete the requests if they are no longer necessary. We review the requirement every two years; we permanently store requests from customers who have a customer account and refer to the customer account details for deletion. Furthermore, the statutory archiving obligations apply.
15. Collection of access data and log files
15.1. We raise on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO Data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, transferred data volume, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited site), IP address and the requesting provider.
15.2. Log file information is stored for a maximum of seven days for security reasons (e.g. to investigate abuse or fraud) and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until final clarification of the respective incident.
16. Online presence in social media
16.1. We maintain on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO online presences within social networks and platforms in order to communicate with customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
16.2 Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.
17. Facebook social plugins
17 Facebook Social Plugins17.1 We use Facebook Social Plugins on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) Social Plugins (“Plugins”) of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The Plugins can display interaction elements or content (e.g. videos, graphics or text contributions) and can be recognized by one of the Facebook logos (white “f” on blue tile, the terms “Like”, “Like” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of the Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
17.2. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
17.3. When a user calls up a function of this online offer that contains such a plugin, his device establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to the user’s device and integrated into the online offer by the user. User profiles can be created from the processed data. We therefore have no influence on the extent of the data that Facebook collects with the help of this plugin and therefore inform the users according to our state of knowledge.
17.4. By integrating the plugins, Facebook receives the information that a user has called up the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. When users interact with the plugins, for example by pressing the Like button or posting a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out and store his or her IP address. According to Facebook, only an anonymised IP address is saved in Germany.
17.5. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
17.6. If a user is a Facebook member and does not want Facebook to collect data about him/her via this online offer and link it with his/her membership data stored on Facebook, he/she must log out of Facebook before using our online offer and delete his/her cookies. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.
17.7 Facebook Pixel
Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used.
We use the “conversion pixel” or visitor action pixel of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). By calling this pixel from your browser, Facebook can subsequently detect whether a Facebook ad was successful, i.e. led to an online purchase. For this purpose, we receive only statistical data from Facebook without reference to a specific person. This allows us to track the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are logged in to Facebook, we refer to their data protection information https://www.facebook.com/ads/preferences/.
- Basis
The use of the Facebook Pixel as well as the storage of “conversion cookies” is based on Art. 1 lit. a GDPR. - Contradiction
You can object to the capture by the Facebook pixel and use of your data to display Facebook ads. To set what types of ads you see within Facebook, you can go to the page set up by Facebook and follow the settings for usage-based ads. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices. You can also object to the use of cookies for range measurement and advertising purposes via the deactivation page of the network advertising initiative and additionally the US websiteaboutads.info or the European website youronlinechoices.com.
You can find another opt-out option in our cookie statement.
18. Communication by post, e-mail, fax or telephone
18.1 We use remote means of communication, such as post, telephone or e-mail, for business and marketing purposes. We process inventory data, address and contact data as well as contract data of customers, participants, interested parties and communication partners.
18.2 Processing is carried out on the basis of Article 6 paragraph n Customers, participants, interested parties and communication partners. 1 lit. a, Art. 7 DSGVO, Art. 6 para. 1 lit. f DSGVO in connection with legal requirements for advertising communications. Contact will only be established with the consent of the contact partners or within the scope of the legal permissions and the processed data will be deleted as soon as they are not required and otherwise with objection/ revocation or omission of the basis of entitlement or legal archiving obligations.
Dispatch service provider: Newsletters are sent via “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy-Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
19. Newsletter
19.1. With the following notes we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.
19.2. Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter “newsletter”) only with the consent of the recipients or legal permission. Insofar as the contents of the newsletter are specifically described within the scope of registration for the newsletter, they are decisive for the consent of the users. In addition, our newsletters contain information about our products, offers, promotions and our company.
19.3. Double-Opt-In and logging: The registration for our newsletter takes place in a so-called Double-Opt-In procedure. This means that after registration you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that nobody can register with foreign e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the login and confirmation time as well as the IP address. Changes to your data stored by the shipping service provider are also logged.
19.4. Dispatch service provider: Newsletters are sent via “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the data protection regulations of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy-Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).
19.5. If we use a dispatch service provider, the dispatch service provider may, according to its own information, use this data in a pseudonymous form, i.e. without allocation to a user, to optimise or improve its own services, e.g. to technically optimise the dispatch and presentation of newsletters or for statistical purposes to determine from which countries the recipients come. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or pass them on to third parties.
19.6. Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name for the purpose of personal contact in the newsletter.
19.7. Success measurement – The newsletters contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from their server. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and time of retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behaviour based on their retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention, nor that of the shipping service provider, if used, to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.
19.8. Germany: The dispatch of the newsletter and the measurement of success are based on the consent of the recipients in accordance with § 3.1. Article 6 (2) 1 lit. a, Art. 7 DSGVO i.V.m § 7 para. 2 Nr. 3 UWG bzw. on the basis of the legal permission according to § 7 para. 3 UWG.
19.10. The logging of the registration procedure takes place on the basis of our legitimate interests according to Article 6 (2) 1 lit. f DSGVO and serves as proof of consent to receive the newsletter.
19.11. Newsletter recipients can cancel the receipt of our newsletter at any time, i.e. revoke their consent. A link to cancel the newsletter can be found at the end of each newsletter. At the same time, their consent to the measurement of success expires. A separate revocation of the performance measurement is unfortunately not possible, in this case the entire newsletter subscription must be cancelled. When you unsubscribe from the newsletter, your personal data will be deleted, unless their retention is legally required or justified, in which case their processing will be limited only to these exceptional purposes. In particular, we may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter, in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for cancellation is possible at any time, provided that the former existence of a consent is confirmed at the same time.
20. Integration of third-party services and content
20.1. Within our online offer, we set the following priorities on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO), we use content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always assumes that the third party providers of this content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore required to display this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, and may be linked to such information from other sources.
20.2. The following presentation offers an overview of third-party providers and their contents, together with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, the possibility to object (so-called opt-out)
– If our customers use the payment services of third parties (e.g. PayPal or Sofortüberweisung), the terms and conditions and the privacy policy of the respective third party provider apply, which can be accessed within the respective websites or transaction applications.
– External fonts from Google, LLC., https://www.google.com/fonts (“Google Fonts”).https://www.google.com/fonts The integration of the Google Fonts is done by a server call at Google (usually in the USA). Privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.
– Maps of the “Google Maps” service provided by the third-party provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA Privacy policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– Videos from the “YouTube” platform of the third-party provider Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– Innerhalb unseres Onlineangebotes sind Funktionen des Dienstes Instagram eingebunden. Diese Funktionen werden angeboten durch die Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA integriert. Wenn Sie in Ihrem Instagram – Account eingeloggt sind können Sie durch Anklicken des Instagram – Buttons die Inhalte unserer Seiten mit Ihrem Instagram – Profil verlinken. Dadurch kann Instagram den Besuch unserer Seiten Ihrem Benutzerkonto zuordnen. Wir weisen darauf hin, dass wir als Anbieter der Seiten keine Kenntnis vom Inhalt der übermittelten Daten sowie deren Nutzung durch Instagram erhalten. Datenschutzerklärung: http://instagram.com/about/legal/privacy/.
20.3. We use Google Analytics to ensure that advertising placed by advertising services provided by Google and its partners is only displayed to users who have shown an interest in our website or possess specific characteristics communicated to Google by us (e.g. an interest in particular topics or products determined on the basis of the websites they have visited in the past). Mit Hilfe der Remarketing Audiences möchten wir auch sicherstellen, dass unsere Anzeigen dem potentiellen Interesse der Nutzer entsprechen und nicht belästigend wirken. The resultant user groups are referred to as “Remarketing Audiences” or “Google Analytics Audiences”. We also use Remarketing Audiences to ensure that our advertising matches users’ potential interests and does not have an irritating effect.
21. Google Analytics
21.1. On the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. Die durch das Cookie erzeugten Informationen über Benutzung des Onlineangebotes durch die Nutzer werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert.
21.2. Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
21.3. Google will use this information on our behalf to evaluate the use of our website by the users, to compile reports on the activities within this website and to provide further services to us in connection with the use of this website and the internet. Pseudonymous user profiles of the users can be created from the processed data.
21.4. We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.
21.5. The IP address transmitted by the user’s browser is not merged with other data from Google. Users can prevent the storage of cookies by making appropriate settings in their browser software; users can also prevent the collection of data generated by the cookie and related to their use of the online offer to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link https://tools.google.com/dlpage/gaoptout?hl=de.
21.6. Further information on Google’s use of data, setting and objection options can be found on the websites of Google: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use websites or apps of our partners”), https://policies.google.com/technologies/ads (“Use of data for advertising purposes”), https://adssettings.google.com/authenticated (“Manage information that Google uses to show you advertising”). Translated with www.DeepL.com/Translator (free version)
22. Cloudflare
Our pages use functions of CloudFlare. Provider is the CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. CloudFlare offers a worldwide distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via the CloudFlare network. CloudFlare is thus able to analyze the data traffic between users and our websites, for example, in order to detect and fend off attacks on our services. In addition, CloudFlare may store cookies on your computer for optimization and analysis. This serves to safeguard our legitimate interests, which outweigh any other interests, in an optimal marketing of our offer in accordance with Art. 6 para. 1 S. 1 lit. b DSGVO.
We have concluded a corresponding agreement with Cloudflare on the basis of the DSGVO for order processing. Cloudflare is a certified participant of the EU-US Privacy Shield Framework. Cloudflare has committed itself to handling all personal data contained in the Member States of the European Union (EU) in accordance with the Privacy Shield Framework and its applicable principles. More information about the Privacy Shield Framework can be found on the Privacy Shield List of the US Department of Commerce at https://www.privacyshield.gov. Cloudflare collects statistical data about the visit of this website. The access data includes: Name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses the log data for statistical evaluations for the purpose of operation, security and optimization of the offer.
Here you will find information about the data collected there and about security & privacy at CloudFlare.
23. Wordfence
This site uses the security plugin WORDFENCE to protect the site from hacker attacks etc. Provider is DEFIANT, 800 5th Ave Ste 4100, Seattle, WA 98104
The provided DSGVO-compliant data processing agreement was concluded.
WORDFENCE currently uses three cookies and the following explains what each cookie does, who set the cookie and why the cookie helps protect the site.
wfwaf-authcookie- (Hash) What it does: This cookie is used by the WORDFENCE firewall to perform a skill check on the current user before loading WordPress. Who receives this cookie: This cookie is only set for users who can log in to WordPress. How this cookie helps: With this cookie, the WORDFENCE firewall recognizes logged-in users and allows them increased access. WORDFENCE can also detect unlogged users and restrict their access to secure areas. The cookie tells the firewall what level of access a visitor has, to help the firewall make wise decisions about who can be allowed and who should be blocked.
wf_loginalerted_ (Hash) What it does: This cookie is used to notify the WORDFENCE administrator when an administrator logs on from a new device or location. Who receives this cookie: This cookie is set for administrators only. How this cookie helps: This cookie helps website operators to know if an admin login has taken place from a new device or location.
wfCBLBypassWhat it does: WORDFENCE allows a site visitor to bypass country blocking by accessing a hidden URL. With this cookie it can be traced who is allowed to circumvent the blocking of the country. Who receives this cookie: When a hidden URL defined by the site administrator is accessed, this cookie is used to verify that the user can access the site from a country restricted by the country’s blocking. This is set for anyone who knows the URL that allows you to bypass the standard country block. This cookie is not set for someone who does not know the hidden URL to bypass the country blocker. How this cookie helps: This cookie gives site owners the ability to allow certain users to have blocked countries even though their country has been blocked.
More information on the handling of user data can be found in the DEFIANT privacy policy: https://www.WORDFENCE.com/privacy-policy/
24. ManageWP ) Protect and secure the website
To protect and secure data from our website, we use the services of the provider ManageWP
- GoDaddy.com LLC, 14455 N. Hayden Rd, Ste. 219, Scottsdale, AZ 85260, United States of America
- GoDaddy.com WP Europe, Trg republic s5, 11000 Belgrade, Serbia
Through this service, we secure our data on servers in the European Economic Area and thus ensure the smooth operation of our online services. Within ManageWP’s service, we have the ability to monitor our pages for outages, external attack attempts, and performance. The service counts the views of the pages. We do not have access to IP addresses or personal data.
GoDaddy has submitted to the Privacy Shield Agreement and acknowledges the requirements of the GDPR:
https://www.privacyshield.gov/participant?id=a2zt0000000TN9xAAG&status=Active
For more information on ManageWP data protection, visit: https://managewp.com/privacy | ManageWP statement on GDPR: https://managewp.com/blog/managewp-and-gdpr-compliance
We have a contract for order processing with GoDaddy.com LLC.
