Data protection statement
The protection of your privacy is very important to us. We therefore proceed according to the statutory regulations of the European and German data protection legislation in all operations of data processing (e.g. collecting, processing and transmission).
The following statement gives you an overview of which of your data is asked for on our websites, how this data is used and forwarded, in which way you can find out about the information given to us and which security measures we take to protect your data.
1. Who is your contact (controller) for your data protection concerns?
Controller as defined in the data protection regulations for all data processing procedures carried out via our websites is:
Game Changing Media BV
Zuider Emmakade 59zw
2012KN Haarlem
The Netherlands
Email: [email protected]
Phone: +31 (0) 630800351
We have not appointed a data protection officer as the statutory prerequisites for an appointment do not exist in our company.
Please address your enquiries on the topic of data protection and the assertion of the rights of data subjects (cf. below) to the above address.
2. Which data do we need from you for the use of our websites? Which data is collected and stored during use?
Personal data is any information that refers to an identified or identifiable natural person (“data subject”), such as e.g. your name, your address, your phone number, your date of birth, your bank details and your IP address.
Basically, we only collect and use personal data of our users when this is necessary in order to provide a functioning website and our contents and services. The collection and use of personal data of our users is only carried out as a rule after obtaining the consent of the user. An exception applies in such cases, where obtaining prior consent is not possible for practical reasons and the processing of data is permitted by statutory regulations.
Usage data
The following data is recorded during the use of our websites, whereby storage is exclusively for internal system-related and statistical purposes, so-called usage data:
1. Technical matters:
Date/time, URL, domain, name of the site, IP (anonymised), User-Agent (browser, operating system, device, version, language), country, city, region, Referrer
2. Marketing:
Campaign-Ids, keywords, partner-Ids, source, medium, creative, sub-Ids, segment-Ids, trigger-Ids
3. Conduct:
If the site/app has been loaded the Terms/Policies were accepted, Chat (start/half/end), advertising was displayed, interactive contents were displayed (e.g. quiz, game), which answers were e.g. given with the quiz, which result was produced with the quiz, how many points were achieved, was a newsletter requested/subscribed to, were push-notifications requested/ subscribed to, were links clicked, was a payment initiated/carried out, was the share function clicked
The data is also stored in the log files of our system. A storage of these data together with other personal data of the user will not take place.
Legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR (General Data Protection Regulation).
The temporary storage of the IP address is required by the system, in order to enable the delivery of the website to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session.
The storage in log files is carried out to ensure the functioning of the website. In addition, the data is used to optimise the website and ensure the security of our IT systems. An analysis of the data for marketing purposes does not take place in this connection.
Our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR also lies in these purposes.
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of recording data to make the website available, this is the case when the respective session is terminated.
In the case of storing the data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or modified so that it is no longer possible to allocate them to the accessing client.
The recording of data to make the website available and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no contesting option.
Registration
We offer users the option of registering on our website, giving personal data. For this, the data is entered in an entry mask and transmitted to us and stored. The data is not forwarded to third parties. The following data is processed in the course of the registration process:
1. Email, name
At the time of registration the following data is also stored:
1. Technical matters:
Date/time, URL, domain, name of the site, IP (anonymised), user-agent (browser, operating system, device, version, language), country, city, region, referrer
2. Marketing:
Campaign-Ids, keywords, partner-Ids, source, medium, creative, sub-Ids, segment-Ids, trigger-Ids, session count
3. Content: Chat-/quiz-ids, state of chat/quiz, answers of a quiz, results of quizzes
Legal basis for processing the data in the case of the existence of the user’s consent is Art. 6 para. 1 lit. a GDPR.
If the registration serves the fulfilment of a contract, of which the user is a contractual party or the execution of pre-contractual measures, additional legal basis for processing the data is Art. 6 para. 1 lit. b GDPR.
Registration of the user is necessary to fulfil a contract with the user or to execute pre-contractual measures.
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected.
This is the case for the fulfilment of a contract or the execution of pre-contractual measures during the registration process, if the data is no longer necessary for the execution of the contract. Even after concluding the contract, the necessity to store personal data of the contractual partner may exist, in order to comply with contractual and statutory obligations.
Permanent obligations require the storage of the personal data during the contractual term. Moreover, warranty periods must be complied with and the storage of data for tax purposes. Which storage deadlines are to be adhered to hereby, cannot be stipulated globally, but must be determined for the respectively concluded contracts and contractual parties in an individual case.
As a user you have the possibility to dissolve the registration at all times. You can have the data stored in relation to you changed at all times. You can edit your profile or delete your account, for this purpose you must go to your profile and press the corresponding button (see also our General Business Terms and Conditions [German abbreviation: AGB]).
If the data is required to fulfil a contract or to execute pre-contractual measures, a premature erasure of the data is only possible, if it is not contrary to contractual or statutory obligations.
Contact form
We provide a contact form for you on our website, with which you can conveniently get in touch with us electronically and send us your request. We merely collect your name and your e-mail address via the contact form. At the time when the message is sent moreover the data entered under the item usage data will be stored.
For the processing of data during the dispatch process reference will be made to privacy statement.
Alternatively, it is possible to contact us using the e-mail address provided. In this case the personal data of the user if applicable transmitted with the e-mail are stored.
We only use your data to process your enquiry and can contact you for this purpose using the contact data given. Use of this data for advertising purposes or forwarding to third parties does not take place.
Legal basis for the processing of the data transmitted to us via the contact form or in the course of transmitting an e-mail is Art. 6 para. 1 lit. f GDPR. If making contact also aims at concluding a contract, additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
The processing of personal data from the entry mask is only used for processing the communication with you. In the case of contact made by e-mail, the required legitimate interest is also in the processing of the data.
The other personal data processed during the dispatch process are only used to avoid abuse of the contact form and to ensure the security of our IT systems.
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case for the personal data from the entry mask of the contact form and the personal data transmitted by e-mail, if the respective conversation with the user is terminated. The conversation is terminated when it can be inferred from the circumstances that the situation concerned has been conclusively clarified.
The personal data additionally collected during the dispatch process are deleted after a period of seven days at the latest.
Right to object:
You have the right to object at any time to the processing of personal data relating to you. Therefor please use the contact options listed above. If you contact us by e-mail an object to the use and saving of your personal data we will not be able to continue the conversation.
The user has the possibility to revoke his consent to the processing of personal data at all times via the aforementioned contact data. Should the user contact us by e-mail, he can revoke the storage of his personal data at all times. The conversation cannot be continued in such a case.
All personal data that was stored in the course of making contact will be deleted in this case.
3. How are my data used and possibly forwarded to third parties, and for which purpose is this carried out?
We use the personal data made available by you in order to reply to your enquiries, to process your order, for the purpose of technical administration of our websites as well as for the maintenance/orientation of the platform.
A forwarding, a sale or any other transmission of your personal data to third parties will only be carried out if the forwarding is for the purpose of processing the contract or you have explicitly granted your consent hereto.
Legal basis for the transmission of data to third parties for contract processing purposes is Art. 6 para. 1 lit. b GDPR.
Forwarding in legally prescribed cases
We point out that we are entitled in individual cases to give information on data upon instructions of the competent body, where this is required for the purposes of law enforcement, averting danger by the police forces of the German federal states, for complying with the legal assignments of the state and federal offices of the protection of the constitution.
4. Integration and use of plug-ins of social networks1, in particular Facebook “recommend”- or “like” button, and other references to external services of social networks
Buttons of the social networks Facebook and Twitter are integrated on our websites and services. The buttons will only be activated if you register for our services or by giving your consent in advance with the click of our START (or similar named) button. Only then will a connection be established to the servers of the respective social network service and the information transmitted that you are visiting our websites; your usage data will however also only be transmitted when you are logged into your account of the respective social network service. By clicking the corresponding START (or similar named) button and/or ticking the corresponding checkbox and registration for our services you declare that you agree that the data processing is carried out as described in this Section of our privacy statement.
1 Will only apply to the so-called 2-click-variant! Social media references are initially deactivated and will only be activated by the first click by the user. Only after this first click will the references be subsequently loaded and a connection be established to the respective server. Only then is a data transmission to the social network service also possible.
The following will specifically apply to the use of the buttons of Facebook on our websites:
Facebook
On our websites we have integrated so-called plug-ins of the external social network Facebook and also link to Facebook. Exclusively responsible for Facebook and its internet presence is Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as “Facebook”). You can find a full overview of the Facebook plug-ins here: http://developers.facebook.com/docs/plugins.
Our references to Facebook are marked on our websites by the Facebook logo.
The button of Facebook will only be activated if you have agreed to the activation of social media plug-ins in the registration for our services. With the registration or confirmation of our START(or similar named) buttons you will receive further information by an information field relating to the details of the possible data transmission to Facebook, whereby reference is made to this part of our data protection provisions.
As soon as you are logged in to our services or started using it (by giving your consent before) a connection will be established to the servers of Facebook. The information will be transmitted to Facebook that you are visiting our websites. If you are logged into Facebook via your user account, further information, among others the user data stated above under 2. will be forwarded to Facebook. This Information will be transmitted to Facebook, allocated to your user account, stored there and, under certain circumstances, also forwarded to third parties, in particular advertising partners of Facebook. This is, however, only carried out if you are logged into your Facebook user account. In order to prevent a data transmission to Facebook you must log-out from your Facebook user account before you log into the respective service. We would like to point out that the functions allocated to the Facebook links, in particular the transmission of information and user data to Facebook, will not become active already by the visits to our websites, but only after the log-in or started and giving corresponding consent to our services.
Further information about the purpose and extent of data collection and about the further processing of your data by Facebook can be found in the data protection regulations of Facebook. These can be found in the internet under https://www.facebook.com/privacy/explanation. Here you will also find information, among others about setting options to protect your privacy and about your further rights concerning the collection, processing and use of your data by Facebook.
Legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
Twitter
On our websites we have also integrated plug-ins of the external social network Twitter and also link to Twitter. Exclusively responsible for Twitter and its websites is Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103.
Our references to Twitter are marked on our websites by the Twitter logo.
The Tweet button of Twitter will only be activated if you have agreed to the use of plug ins with the registration and log-in to our services or by giving your consent in advance with the click of our START (or similar named) button. With the registration by an information field you will receive further information relating to the details of the possible data transmission to Twitter, whereby reference is made to this part of our data protection provisions.
As soon as you are logged in to our services or gave your consent in advance with the click of our START (or similar named) button the Tweet button will be loaded and a connection will be established to the servers of Twitter. If you are logged into Twitter via your user account certain information and the user data stated under §1 Par.1 will be forwarded to Twitter, also that you have visited our website. This Information will be transmitted to Twitter, stored there and, under certain circumstances, also forwarded to third parties, in particular advertising partners of Twitter. This is, however, only carried out if you are logged into your Twitter user account. In order to prevent a data transmission to Twitter you must log-out from your Twitter user account before you log into or use with giving consent the respective service. We would like to point out that the functions allocated to the Twitter links, in particular the transmission of information and user data to Twitter, will not become active already by the visits to our websites, but only after the log-in to our services or by giving your consent in advance with the click of our START (or similar named) button.
Further information about the purpose and extent of data collection and about the further processing of your data and storage period by Twitter can be found in the data protection regulations of Twitter. These can be found in the internet under https://twitter.com/de/privacy. Here you will also find information, among others, about setting options to protect your privacy and about your further rights concerning the collection, processing and use of your data by Twitter.
Legal basis for processing the data is Art. 6 para. 1 lit. a GDPR.
Other references to external services of social networks
On our websites we link to the social media platforms Facebook, Instagram, YouTube and Twitter. This is carried out via a corresponding symbol on our websites that is labelled with the corresponding logo of the respective social media platform and behind which a corresponding link to our corresponding social media page is hidden. Social plug-ins (such as the Facebook “Like” button) are not integrated here.
No data relating to you is transmitted to these services by our references to the social media services. These are normal hyperlinks, via which no data transmission takes place regularly. If you click on the link, you will be forwarded directly to our social media presence at the respective social media service. A data transmission only takes place in doing so, if you are logged on to your user account of the corresponding social media service. You can then link or distribute contents of our websites directly with the social media service or, in the case of YouTube, watch the videos of our YouTube channel. The respective social media service possibly finds out which contents you have watched on our websites in this way.
Responsible for the social media services linked by us are exclusively:
for Facebook and their web presence Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA;
for Instagram and their web presence Instagram, LLC, 1601 Willow Rd. Menlo Park, CA 94025, USA;
for YouTube and their web presence YouTube, LLC, 901 Cherry Ave., St. Bruno, CA 94066, USA;
for Twitter and their web presence Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA;
for the WhatsApp Sharing Button the WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Further information about the purpose and extent of data collection and about the further processing of your data by the respective social media service can be found in the data protection regulations of the respective service. These are available on the internet:
Facebook: https://www.facebook.com/about/privacy/
Instagram: https://www.instagram.com/about/legal/privacy/
YouTube: https://www.google.de/intl/de/policies/privacy/
Twitter: https://twitter.com/privacy
WhatsApp: https://www.whatsapp.com/legal/?l=de#privacy-policy
Under the named links, you will also find information about settings options to protect your privacy and about your further rights concerning the collection, processing and use of your data by the respective social media service, among other things.
5. What security measures have we taken to protect your data?
We have taken a variety of security measures to protect personal information appropriately and adequately.
Our databases are protected by physical and technical measures, as well as procedural measures that restrict access to the information to specially authorised persons in compliance with this data protection statement. Our information system is located behind a firewall to prevent access from other networks that are connected to the internet. Only employees, who require the information to complete a special task, obtain access to personal information. Our staff are trained regarding security and data protection practices.
We use the standardised SSL encryption technology when collecting and transmitting data via our internet pages. Personal details are transmitted via SSL encryption during the ordering procedure, identifiable in the browser by the lock icon and in address line by the addition “https://”.
When communicating by e-mail, we cannot guarantee full data security.
6. Advertising by e-mail (e.g. E-mail newsletter)
On our website there is the possibility to subscribe to a free newsletter. The data from the entry mask is thereby transmitted to us when registering for the newsletter.
1. Name
2. E-mail address
Moreover, the data stated above under the item usage data will be collected with the log-in:
We seek your consent for the processing of data during the login process and refer to this data protection statement.
No data is forwarded to third parties in connection with the data processing for the despatch of newsletters. The data is exclusively used for the despatch of the newsletters.
Legal basis for processing the data after registration for the newsletter by the user in case of the existence of the user’s consent is Art. 6 Para. 1 lit. a GDPR.
The collection of the user’s e-mail address is used to send the newsletter.
The collection of other personal data within the scope of the registration process serves to prevent a misuse of the services or the used e-mail address.
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. The user’s e-mail address is, therefore, stored for as long as the subscription of the newsletter is active.
Revocability of granted consent:
The user concerned can cancel the subscription of the newsletter at all times. A corresponding link can be found for this purpose in every newsletter.
The user concerned can cancel the subscription of the newsletter at all times. A corresponding link can be found for this purpose in every newsletter.
A revocation of the consent to store personal data collected during the registration process is also made possible here.
7. Newsletter Tracking
In our e-mail messages we use a so-called Newsletter-Tracking. An evaluation of the opening rate of the e-mails and a click evaluation within the newsletter are carried out thereby. We use this technique to determine the degree of interest in specific topic and to measure the effectiveness of our communication measures. Our legitimate interest according to Art. 6 para. 1 lit. f GDPR also lies here. This data is segmented and stored in an anonymised manner. We do not exchange this data with anyone and we make no attempt to associate "click-throughs" with individual e-mail addresses. The individual user data is deleted after the compiling of the anonymised total evaluation - after 3 months at the latest.
The legal basis for the processing of personal data for analysis purposes is Art. 6 para. 1 lit. f GDPR.
Right to object:
By revoking the subscribing of the newsletter (via link, see above), you can object to the processing of personal data for the purpose of tracking relating to you.
8. Blog with comment function
For the comment function on this site besides your comment details are also stored at the time when the comment is made, your e-mail address and, if you do not post anonymously, the user name chosen by you.
We need your e-mail address in order to contact you if a third party should complain that your published content is unlawful. We also reserve the right to delete comments if they are declared as unlawful by third parties.
Your IP address will be recorded and stored when posting a comment. This storage of the IP address is carried out for safety reasons and for the event that the relevant person infringes the rights of third parties by a submitted comment or posts unlawful contents.
The comments and the thus associated data (e.g. IP address) will be stored and will remain on our website, until the commented content has been deleted in full or the comments have to be deleted for legal reasons (e.g. insulting comments).
Legal basis for the storage of the comments in case of the existence of the user’s consent is Art. 6 Para. 1 lit. a GDPR.
Legal basis for the storage of the IP and e-mail address is Art. 6 para. 1 lit. f GDPR.
The subsequent comments can be subscribed to by users. The users will receive a confirmation e-mail in order to check whether they are the holders of the entered e-mail address.
Revocability of granted consent:
Users can cancel their registration to regular comment subscriptions at all times. You can find the corresponding instructions in this respect in the confirmation e-mail.
9. A cookie is stored on your computer when you use our websites. What does this mean?
We use so-called cookies on our websites. Cookies are small amounts of data in the form of text information that the web server sends to your browser. These are only stored on your hard disk. Cookies can only be read by the server that previously stored them there and provides information about what you have looked at on a website and when. Cookies themselves only identify the IP address of your computer and do not store any personal information, such as your name. The data stored in the cookies is not linked to your personal details (name, address, etc.).
We use cookies in order to make our website more user-friendly. Some elements of our website make it necessary to be able to identify the accessing browser even after a page change.
The data is stored in the cookies and transmitted for the following purposes:
1. In order to re-commence the service (e.g. chat will be read further, quiz will be continued)
2. in order to recognise the user
We additionally use cookies on our website, which enable an analysis of the surfing behaviour of the users.
This way e.g. the following data can be transmitted:
1. personalised greetings
2. current content (chat, quiz)
3. Results from such contents / such a quiz
The data of the users collected on this website are pseudonymised by technical means. An allocation of data to the accessing user is therefore no longer possible. The data is not stored together with any other personal data relating to the user.
It is up to you to decide whether you allow cookies. On the one hand, you have the option of accepting all cookies, of being informed when cookies are set or refusing all cookies by changing your browser settings (usually to be found under “Option” or “Settings” in the browser’s menu.
The legal basis for the processing of personal data using the cookies technically needed for this is Art. 6 para. 1 lit. f GDPR.
The objective of using technically necessary cookies is to simplify the use of websites for the user. Some functions of our website cannot be offered without the use of cookies. It is necessary for these that the browser is also identified after a page change.
The user data collected by technically necessary cookies are not used for creating user profiles.
The use of the analysis cookies is carried out for the purpose of improving the quality of our website and its contents. Through the analyse cookies we discover how the website is used and can thus constantly optimise our offer.
Our legitimate interest in data processing according to Art. 6 para. 1 lit. f GDPR also lies in these purposes.
Right to object:
Cookies are stored on the computer of the user and transmitted by him to our site. In this way, you still have the full control over the use of cookies as the user. You can deactivate or limit the transmission of cookies by changing the settings in your internet browser. Cookies already stored can be deleted at any time. This can even be done automatically. If cookies are deactivated for our website, it is possible that all the functions of the website may not be used to their full extent.
Some of our services also use so-called tracking bugs or tracking pixels as well. These are mostly only 1x1 pixel measuring code snippets that are able to identify and to recognise the type of your browser via the browser ID – the individual fingerprint of our browser. The service provider can therefore see when and how many users have accessed the pixel, or whether and when an e-mail was opened or a website was visited.
Right to object:
In order to prevent web-bugs on our websites, you can use tools such as e.g. webwasher, bugnosys or AdBlock. In order to prevent web-bugs in our newsletter please set your mail programme so that no HTML is displayed in messages. Web-bugs are also prevented if you read your e-mails offline. Without your explicit consent we will not use web-bugs in order to collect personal data about you without being noticed or to transmit such data to third party providers and marketing platforms.
10. Use of software for marketing and analysis purposes
The services named below will be used for advertising and marketing purposes with the objective to make our offer more attractive and to give you a nice shopping experience. As described with the individual services we take your right to data protection seriously by the fact that you can object to all services and we will inform you in advance about this data protection notices. Legal basis for the data processing activities stated below is Art. 6 Para. 1 lit. a GDPR.
In order to fulfil our contractual obligations and to operate, analyse or improve our services we additionally collect anonymised user data when you visit our website, through an analysis tool developed especially for this purpose. For this purpose we collect data relating to
1. Technical matters:
Date/time, URL, domain, name of the site, IP (anonymised), user-agent (browser, operating system, device, version, language), country, city, region, referrer
2. Marketing:
Campaign-Ids, keywords, partner-Ids, source, medium, creative, sub-Ids, segment-Ids, trigger-Ids, session count
3. Content: Chat-/quiz-ids, state of chat/quiz, answers of a quiz, results of quizzes
We use this usage data for system-relevant and statistical purposes. The data will not be forwarded to third parties, unless you have explicitly consented to this forwarding in advance.
In order to be able to analyse the profitability of individual advertising campaigns we additionally store data relating to these campaigns and to the advertisements placed in these campaigns. We hereby store the name of the campaign and the website on which the advertisements for the campaign were displayed
In addition, we further use for marketing and analysis purposes the following services of third party providers:
a) We use Google Analytics and Google AdSense. What does this mean for your data?
Google Analytics
On our websites we use Google Analytics, a web analysis service of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses so-called “cookies”, text files, which are stored on your computer and which enable an analysis of the use of the website by you (cf. 10.). The information generated by the cookie regarding your use of this website is as a rule transmitted to a server of Google in the USA and stored there. In the event of the activation of the IP anonymisation on this website, your IP address is however previously abbreviated by Google within member states of the European Union or in other contracting states of the Treaty on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google in the USA and abbreviated there. By order of the operator of this website Google will use this information in order to evaluate your use of the website in order to compile reports about the website activities and to provide further services associated with the website use and the internet use towards the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be aggregated with other data of Google. You can prevent the storage of the cookies by a corresponding setting of your browser software; however we would like to point out that in this case you will, if applicable, not be able to use all functions of this website in full. You can additionally prevent the use of the data generated by the cookie and referring to your use of the website (incl. your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link (http://tools.google.com/dlpage/gaoptout).
Right to object:
As an alternative to the installation of the browser plug-in, above all in internet browsers of mobile terminal devices, you can prevent the use by Google Analytics by clicking on the following link:
Deactivate Google Analytics
This way a so-called Opt-Out-Cookie is filed on your device, which prevents the future collection of your data by Google Analytics with the visit to this website.
Please pay attention hereby that, should you delete cookies in your browser settings, this may result in the Opt-Out-Cookie being deleted by Google Analytics and, if applicable, it has to be re-activated by you.
You can find more detailed information relating to the functioning of Google Analytics and the conditions of use and data protection provisions that are relevant for this service under http://www.google.com/analytics/terms/de.html or under http://www.google.de/intl/de/policies/privacy/. We would additionally like to point out to you that on our websites Google Analytics is used with the extension anonymizeIP and therefore IP addresses are only further processed in an abbreviated form in order to exclude a personal reference.
Google AdSense
On our websites we also use Google AdSense, a service of Google Inc., with which content-related advertisements, which are automatically generated by Google, are made available on our websites You can find further information relating to Google AdSense under http://www.google.de/adsense. As Google Analytics Google AdSense also uses cookies, which are stored on your computer and which enable an analysis of the use of our websites by you. In addition, so-called Web Beacons (invisible graphics) are used by Google AdSense, through which your user behaviour on our websites can also be evaluated. The information generated by cookies and Web Beacons regarding the use of these websites (including your IP address) and the supply of advertising formats will be transmitted to a Google server and stored there. Google will use this information in order to compile reports about the website activities and to provide further services associated with the website use and the internet use towards us as the website operator. Google can also, if applicable, forward this data to its advertising partners. We would like to point out that, as opposed to Google Analytics Google has so far not taken any precautions for its service Google AdSense for an anonymisation of your IP address. Therefore, besides the already mentioned data, which relate to your usage activity of our websites, your IP address will also be transmitted to a Google server and stored there. You can prevent the storage of cookies by a corresponding setting of your browser software; however we would like to point out that in this case you will, if applicable, not be able to use all functions of our websites in full.
The use of Google AdSense is necessary in order to ensure the financing of the website by advertising. The corresponding legal basis can be found in Art.6 Para.1 lit.f GDPR.
b) We use Google Maps plug-ins. What does this mean for you?
We use a plug-in of the internet service Google Maps on our website. The operator of Google Maps is Google Inc., based in the USA, CA 94043, 1600 Amphitheatre Parkway, Mountain View. By using Google Maps on our website information about the use of this website and your IP address is transmitted to a Google server in the USA and also stored on this server We have no knowledge of the precise content of the transmitted data, nor about their use by Google. The company negates in this context the connection of the data with information from other Google services and the recording of personal data. However, Google can transmit the information to third parties. If you deactivate Javascript in your browser you will prevent the execution of Google Maps. You can then however not use a map display on our website either. With the use of our website you declare that you agree with the described collection and processing of the information by Google Inc.. You can find out more details relating to the data protection provisions and conditions of use for Google Maps here: https://www.google.com/intl/de_de/help/terms_maps.html.
c) On our websites we use so-called Retargeting or Remarketing technologies. What does this mean?
On our websites we use technologies for the so-called Retargeting or Remarketing. This concerns a tracking process in the field of online marketing, with which visitors of a website are marked and subsequently are to be addressed on other websites with specific advertising again. We use this new technology in order to make our range of offers even more attractive and to inform you about current offers, which you have viewed on our website once before already and to remind you of these products.
From a technical point of view either an additional cookie is stored on your computer, depending on the Retargeting service, or cookies are used that are already set in your browser (cf. 10.), which identify you or your computer or your browser as an internet user via the so-called cookie-ID as a rule anonymously and record your surfing behaviour, in particular which websites you have accessed from our sites. The cookie can then be read and evaluated by the targeting providers, with which we cooperate (see below). This leads to the fact that you will also be displayed advertising of our products or recommendations for comparable products of third party providers on other websites e.g. as personalised advertising banner.
With the services DoubleClick Remarketing-Pixel and Facebook Remarketing so-called web-bugs fulfil a similar function as cookies, which however are not noticeable for you as a user of our websites. Web-bugs or also “clear GIFs” are small GIF files with an approx. size of 1*1 Pixel, which can be hidden in other graphics, e-mails etc. Web-bugs send your IP address, the internet address (URL), the time, at which the web-bug was viewed, your browser type, as well as previously set cookie information to a web-server.
The data regarding your surfing behaviour collected via cookies or web-bugs cannot be used in order to personally identify you as a visitor to our websites. We only use the data to improve our offer and to evaluate the user behaviour on our websites (e.g. reactions to advertising actions); another use or forwarding to third parties is not carried out. This data is anonymous and not linked with personal data on your computer or with a database. Under certain circumstances we will also use this technology in our newsletter.
In order to prevent web-bugs on our websites, you can use tools such as e.g. webwasher, bugnosys or AdBlock. In order to prevent web-bugs in our newsletter please set your mail programme so that no HTML is displayed in messages. Web-bugs are also prevented if you read your e-mails offline. Without your explicit consent we will not use web-bugs in order to collect personal data about you without being noticed or to transmit such data to third party providers and marketing platforms.
Google DoubleClick Remarketing-Pixel and Google AdWords Remarketing or “similar target groups”
On our websites we use DoubleClick Remarketing-Pixel and Google AdWords Remarketing or “similar target groups”, both services of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). With the help of these services we can display advertising messages to you in connection with our online shop, e.g. interesting product offers, on the websites of other providers, which also use these services of Google (“partners” in the Google Display Network). This is carried out by using the cookie technology (cf. 10.).
Google stores a small file with a string in this respect (so-called cookie-ID) in your browser in order to remember you as a visitor to our websites and to record further anonymous data about the use of our websites. The cookie-ID is stored by us and merely serves as clear identification of your browser and not of your person. Personal data of you is not recorded or stored via these services.
We also use Google Remarketing cross-device. This means that if e.g. you begin the use of our website on your smartphone and continue it on your laptop, we can also reach you with the previously mentioned personalised advertising messages on the other device used by you. This is, however, only carried out if you have agreed towards Google that your web and app browser history is linked by Google with your Google account and information from your Google account will be used for the personalisation of advertisements, which you view in the web. In this case Google uses the data of these registered users together with Google Analytics data in order to create and define target group lists for the cross-device Remarketing. In order to support this function Google-authenticated IDs of these users are collected by Google Analystics. This data of Google is temporarily linked with our Google Analytics data in order to form our target groups.
Please check the privacy settings of your Google account in order to prevent Google linking your web and app browser history with your Google account.
You can find further information relating to the Remarketing services of Google, the details of the data processing through these services and the corresponding data protection provisions of Google under http://www.google.com/policies/technologies/ads/.
You can permanently deactivate the use of cookies by Google by downloading and installing the browser plug-in available under the following link (https://www.google.com/settings/ads/plugin) or by clicking the corresponding objection link in the box highlighted in grey further below in this Section and by following the then appearing further instructions, if applicable. By using the display settingsof Google you can determine yourself, which advertisements you see and deactivate interest-related advertisements.
Facebook Remarketing
On our websites we also use “Custom Audiences” for the purposes of Retargeting or Remarketing, a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). Using this service we can address you in a target-oriented way with advertising as so-called Facebook-Ads are placed for visitors to our websites when you visit the social network Facebook.
For this purpose we have implemented so-called Remarketing-Pixel of Facebook on our websites (cf. 10.) When visiting our websites a direct connection to the servers of Facebook is established via the pixel. Facebook is in the position to identify you based on the browser-ID as it is linked with other data stored in relation to your user account at Facebook. Facebook then supplies individualised advertisements from us coordinated to your needs in your Facebook chronology or elsewhere in Facebook.
We ourselves are not able to identify you personally through the Facebook pixel as, apart from your browser-ID, no further personal data is stored by us through the Remarketing-Pixel of Facebook.
You can find further information relating to Custom Audiences of Facebook, the details of the data processing through this service and the data protection provisions of Facebook under https://www.facebook.com/about/privacy/.
You can deactivate the use of Facebook Remarketing by clicking on the corresponding link in the box. For this purpose you must be logged into your Facebook account.
Right to object:
If you do not wish to have the advertising generated by the respective targeting service displayed to you you can object to the use of the Retargeting technology on our websites by unsubscribing from the respective targeting service. The corresponding links to the websites of the targeting services cooperating with us are as follows:
Google DoubleClick Remarketing Pixel and Google AdWords Remarketing or “similar target groups
Facebook Remarketing
For detaills relating to the data processing by the respective targeting service please refer to the data protection provisions of this service, which we have linked for you above. By clicking on the link you will receive information, how you can object to the use of targeting services on your computer.
Google AdWords Conversion Tracking
On our websites we use the function Google AdWords Conversion Tracking, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). When you click on an AdWords advertisement placed by Google a so-called Conversion-Tracking cookie will be stored on your computer. This cookie is valid for 30 days and does not contain any personal data so that we cannot identify you personally.
Using the Conversion Tracking we and also Google can recognise which AdWords advertisements you have clicked on and whether you were forwarded to our websites via this advertisement, if you visit our websites and the validity of the cookies has not expired yet. We receive a separate cookie from Google, which differs from cookies of other customers of this Google service, so that we can only carry out a range measurement with regard to our cookies and not about all websites of customers of the Google service AdWords. The cookie is used to create own conversion statistics about customers, who visit our websites via AdWords advertisements.
In order to object to the participation in the Google AdWords Conversion Tracking you must deactivate the storage of Google Tracking-Cookies by a corresponding setting in your browser. You will then not be recorded in our Conversion-Tracking statistics.
You can find further information relating to Google AdWords Conversion Tracking, the details of the data processing via this service and the corresponding data protection provisions of Google under http://www.google.com/policies/technologies/ads/
11. Push notifications:
With your prior consent we will send you push notifications or notices via your browser, even if you are not logged into our websites. We use push notifications in order to inform you about our offer and interesting products. When our websites are accessed for the first time you can agree to the receipt of push notifications. You can end the display of push notifications at all times via the corresponding settings in the browser used by you.
The legal basis for the sending of push notifications is Art. 6 Para. 1 lit. a GDPR.
Revocability of granted consent:
You can deactivate the display of push notifications anytime, by deactivating or blocking push notifications in your browser settings (typically under the topic “notifications”)
12. Rights of data subjects
If personal data relating to you is processed, you are a data subject as defined in the GDPR and you are entitled to the following rights against the controller:
Information, rectification, restriction of processing and erasure
You have the right at any time to obtain information free of charge about any personal data we have stored about you, about the origin and recipient as well as the purpose of data processing via our websites. In addition, you have the right to rectification, erasure and restriction of the processing of your personal data, where the statutory provisions exist.
Right to data portability
You have the right to receive the personal data relating to you that you have made available to us as controller in a structured, commonly used and machine readable format. We can meet this right by providing a csv-export of the customer data processed relating to you.
Right to information
If you have asserted your right to rectification, erasure or restriction of processing to the controller, this is obliged to inform all recipients, to whom the personal data relating to you was disclosed, about this rectification or erasure of the data or the restriction of processing, unless this proves to be impossible or involves an unreasonable expense or effort.
You have the right vis-à-vis the controller to be informed of these recipients.
ight to object
You have the right, for reasons that result from your particular situation, to object at any time to the processing of personal data relating to you that is carried out on the basis of Art. 6 Para. 1 lit. e or lit. f GDPR: this shall also apply to a profiling that is supported on these provisions.
The controller no longer processes the personal data relating to you, unless he can prove compelling legitimate grounds for the processing that override your interests, rights and liberties, or the processing serves the assertion, exercise or defence of legal claims.
If the personal data relating to you is processed in order to operate direct advertising, you have the right to object to the processing of the personal data relating to you for the purpose of such advertising at any time, this also includes profiling, where this is associated with such direct advertising.
If you object to the processing for direct advertising purposes, the personal data relating to you will no longer be processed for these purposes.
You have the possibility, in connection with the use of services of the information society – irrespective of the Directive 2002/58/EC – to exercise your right to object by means of automatic processes with which technical specifications are used.
Revocability of data protection declarations of consent
In addition, you may revoke the consents that you have given us with effect to the future at any time at the contact details stated below.
Automatic decision in an individual case including profiling
You have the right not to be submitted to a decision exclusively based on an automatic processing – including profiling – , which will have a legal effect towards you or which will substantially impair you in a similar manner. This will not apply if the decision
(1) is necessary for the conclusion or the fulfilment of a contract between you and the responsible party,
(2) is admissible owing to legal regulations of the Union or the member state, with which the responsible party must comply with, and these legal regulations contain appropriate measures for the safeguarding of your rights and freedom as well as your legitimate interests or
(3) is carried out with your explicit consent.
However, these decisions may not be based on special categories of personal data according to Art.9 Para.1 GDPR, if Art.9 Para.2 lit.a or g does not apply and appropriate measures have been made for the protection of the rights and freedom as well as your legitimate interests.
With regard to the cases stated in (1) and (3) the responsible party will take appropriate measures in order to safeguard the rights and freedom as well as your legitimate interests, which shall at least include the right to achieve the intervention of a person on the part of the responsible party, for presentation of the own point of view and contestation of the decision.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular, in the member state of your place of residence, your place of work or the place of alleged infringement, if you consider that the processing of the personal data relating to you infringes the EU general data protection regulation.
The supervisory authority, with which the complaint has been lodged, informs the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
13. Changes to this data protection statement
We reserve the right to change this data protection statement when the occasion arises and without prior notice. Please therefore consult this page regularly to find out about possible changes to this data protection statement.
