Privacy policy · k3.de
Privacy Policy
Personal data (usually referred to just as “data” below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there.
Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the “GDPR”), “processing” refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not.
The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.
Our privacy policy is structured as follows:
I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing
I. Information about us as controllers of your data
The party responsible for this website (the “controller”) for purposes of data protection law is:
k3 stadterlebnisse GmbH & Co. KG
Alter Steinweg 31
48143 Münster
Amtsgericht Münster, HRA 10768
Telephone: +49 251 1 432 516
Fax: +49 251 1 432 990
Email: info [ad] k3 [Punkt] de
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
- to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
- to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
- to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
- to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
Server Data
For technical reasons, in particular to ensure a secure and stable internet presence, data is transmitted to us or to our web space provider by your internet browser. With these so-called server log files, the type and version of your internet browser, the operating system, the website from which you have switched to our internet presence (referrer URL), the website(s) of our internet presence that you visit, the date and time of the respective access and the IP address of the internet connection from which our internet presence is used are collected, among other things.
The data collected in this way is stored temporarily, but not together with other data about you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is excluded from deletion in whole or in part until an incident has been finally clarified.
Cookies
a) Session-Cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the internet browser you use. These cookies are used to process certain information from you, such as your browser or location data or your IP address, on an individual basis.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping basket function.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR, insofar as these cookies process data for contract initiation or contract fulfilment.
If the processing does not serve to initiate or fulfil a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your Internet browser.
b) Third-Party Cookies
Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysing or the functionalities of our website.
Please refer to the following information for details, in particular the purposes and legal basis for processing such third-party cookies.
c) Removal option
You can prevent or restrict the installation of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific internet browser you are using. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your flash player. The steps and measures required for this also depend on the specific Fflash player you are using. If you have any questions, please also use the help function or documentation of your flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
Contract fulfilment
The data transmitted by you to utilise our range of goods and/or services is processed by us for the purpose of contract processing and is required in this respect. Conclusion and fulfilment of the contract are not possible without the provision of your data.
The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.
We delete the data once the contract has been fully processed, but must observe the retention periods under tax and commercial law.
As part of the contract processing, we pass on your data to the booking system service provider or to the financial service provider, insofar as the transfer is necessary for booking processing or for payment purposes.
The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) GDPR.
Customer profile / Registration function
If you create a customer profile with us via our website, we will collect and store the data you enter during registration (e.g. your name, your address or your e-mail address) exclusively for pre-contractual services, for contract fulfilment or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called notepad function). At the same time, we store the IP address and the date and time of your registration. Of course, this data will not be passed on to third parties.
As part of the further registration process, your consent to this processing is obtained and reference is made to this privacy policy. The data collected by us will be used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfilment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.
You can revoke the consent given to us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must comply with retention periods under tax and commercial law.
Newsletter subscription
If you register for our free newsletter, the data requested from you for this purpose, i.e. your e-mail address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send you the newsletter, describe the content in detail and refer you to this privacy policy. We use the data collected in this process exclusively for sending the newsletter – in particular, it is therefore not passed on to third parties.
The legal basis for this is Art. 6 para. 1 lit. a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation or click on the unsubscribe link contained in every newsletter.
Contact enquiries / contact option
If you contact us via contact form or e-mail, the data you provide will be used to process your enquiry. The provision of the data is necessary for processing and answering your enquiry – without it we cannot answer your enquiry or can only answer it to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
Your data will be deleted if your enquiry has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.
User contributions, comments and ratings
We offer you the opportunity to publish questions, answers, opinions or ratings, hereinafter referred to as “contributions”, on our website. If you make use of this offer, we will process and publish your contribution, the date and time of submission and the pseudonym you may have used.
The legal basis for this is Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation.
We also process your IP address and email address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps if your contribution infringes the rights of third parties and/or is otherwise unlawful.
The legal basis in this case is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in any necessary legal defence.
Online job applications / publication of job adverts
We offer you the opportunity to apply for a job with us via our website. For these digital applications, we collect and process your applicant and application data electronically to handle the application process.
The legal basis for this processing is Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) GDPR. Art. 88 para. 1 GDPR.
If an employment contract is concluded after the application procedure, we will store the data you submitted during the application in your personnel file for the purpose of the usual organisational and administrative process – of course in compliance with further legal obligations.
The legal basis for this processing is also Section 26 para. 1 sentence 1 BDSG in conjunction with Art. 88 para. 1 GDPR. Art. 88 para. 1 GDPR.
If an application is rejected, we automatically delete the data transmitted to us two months after notification of the rejection. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, e.g. due to the burden of proof under the AGG.
In this case, the legal basis is Art. 6 para. 1 lit. f) GDPR and Section 24 para. 1 no. 2 BDSG. Our legitimate interest lies in legal defence or enforcement.
If you expressly consent to a longer storage of your data, e.g. for your inclusion in a database of applicants or interested parties, the data will be processed further on the basis of your consent. The legal basis is then Art. 6 para. 1 lit. a) GDPR. However, you can of course revoke your consent at any time in accordance with Art. 7 para. 3 GDPR by making a declaration to us with effect for the future.
Competition
We offer you the opportunity to take part in competitions via our website. If you take part in one of our competitions, the data you enter when participating will be processed without your further consent, but of course only for the purpose of organising and running the respective competition.
If your data is published in the event of a win, you will be informed of this as part of the declaration of consent.
The legal basis for the disclosure of the data is then Art. 6 para. 1 lit. b) GDPR.
You can revoke your consent to the processing of data for participation in our competitions at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation.
YouTube
We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.
In this respect, we would like to point out that there is a possibility that user data may be processed outside the European Union, in particular in the USA. This may result in increased risks for users in that, for example, subsequent access to user data may be made more difficult. We also have no access to this user data. The access option lies exclusively with YouTube.
You can find YouTube’s privacy policy at
https://policies.google.com/privacy
We operate a company presence on Facebook to advertise our products and services and to communicate with interested parties or customers.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR.
The legal basis for the processing of personal data that takes place as a result and is described below is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing, communicating, selling and advertising our products and services.
The legal basis may also be the user’s consent to the platform operator in accordance with Art. 6 para. 1 lit. a GDPR. The user can revoke this consent for the future at any time by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.
When our online presence is accessed on Facebook, user data (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.
This user data is used for statistical information about the utilisation of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise users within and outside of Facebook based on their interests. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Facebook, the personal data entered by the user on this occasion will be used to process the enquiry. The user’s data will be deleted by us if the user’s enquiry has been conclusively answered and there are no legal obligations to retain the data, e.g. in the case of subsequent contract processing.
Facebook Ireland Ltd. may also set cookies to process the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used to their full extent.
Further information on the processing activities, their prevention and the deletion of the data processed by Facebook can be found in Facebook’s data policy.
It cannot be ruled out that processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
We operate a company presence on Instagram to advertise our products and services and to communicate with interested parties or customers.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
We have regulated the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR.
The legal basis for the processing of personal data that takes place as a result and is described below is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing, communicating, selling and advertising our products and services.
The legal basis may also be the user’s consent to the platform operator in accordance with Art. 6 para. 1 lit. a GDPR. The user can revoke this consent for the future at any time by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.
When our online presence is accessed on Instagram, user data (e.g. personal information, IP address, etc.) is processed by Facebook Ireland Ltd. as the operator of the platform in the EU.
This user data is used for statistical information about the utilisation of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes and to create user profiles. Based on these profiles, Facebook Ireland Ltd. is able, for example, to advertise users within and outside of Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Instagram, the personal data entered by the user on this occasion will be used to process the enquiry. The user’s data will be deleted by us if the user’s enquiry has been conclusively answered and there are no legal obligations to retain the data, e.g. in the case of subsequent contract processing.
Facebook Ireland Ltd. may also set cookies to process the data.
If the user does not agree to this processing, it is possible to prevent the installation of cookies by setting the browser accordingly. Cookies that have already been saved can also be deleted at any time. The settings for this depend on the respective browser. In the case of Flash cookies, processing cannot be prevented via the settings of the browser, but by the corresponding setting of the Flash player. If the user prevents or restricts the installation of cookies, this may mean that not all Facebook functions can be used to their full extent.
Further information on the processing activities, their prevention and the deletion of the data processed by Instagram can be found in Instagram’s data policy.
It cannot be ruled out that processing by Facebook Ireland Ltd. also takes place via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
The Google Analytics service is used to analyse the usage behaviour of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymisation function. This function allows Google to truncate the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an analysis of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it will not associate your IP address with any other data. In addition, Google provides further data protection information for you at
https://www.google.com/intl/de/policies/privacy/partners
In addition, Google offers a so-called deactivation add-on along with further information at
https://tools.google.com/dlpage/gaoptout?hl=de.
This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this privacy policy.
Google Maps
We use Google Maps on our website to display our location and to provide directions. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
If you call up the Google Maps component integrated into our website, Google stores a cookie on your end device via your internet browser. Your user settings and data are processed in order to display our location and provide directions. We cannot rule out the possibility that Google uses servers in the USA.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in optimising the functionality of our website.
The connection to Google established in this way enables Google to determine from which website your enquiry was sent and to which IP address the directions are to be transmitted.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. Details on this can be found above under “Cookies”.
In addition, the use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.
Furthermore, Google offers further information within the following links:
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
Google reCAPTCHA
We use Google reCAPTCHA on our website to check and prevent interactions on our website through automated access, e.g. by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
This service enables Google to determine from which website an enquiry is sent and from which IP address you are using the reCAPTCHA input box. In addition to your IP address, Google may also collect other information that is necessary for the provision and guarantee of this service.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the defence against unwanted, automated access in the form of spam or similar.
Google offer further information on the general handling of your user in the link down below:
https://policies.google.com/privacy.
Google Fonts
We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
In order to enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.
The connection to Google established when you access our website enables Google to determine from which website your request has been sent and to which IP address the display of the font is to be transmitted.
Google offers further information, in particular on the options for preventing the use of data, here:
https://adssettings.google.com/authenticated
https://policies.google.com/privacy
FontAwesome
We use external fonts from FontAwesome to display fonts and visual elements on our website. FontAwesome is a service provided by Fonticons Inc, 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, hereinafter referred to as “FontAwesome”.
When you visit our website, a connection to the FontAwesome server in the USA is established to enable and update the display of fonts and visual elements.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.
By connecting to the FontAwesome server when you visit our website, FontAwesome can determine from which website your request has been sent and to which IP address the font is to be transmitted.
FontAwesome offers further information, in particular on the options for preventing the use of data, here:
https://fontawesome.com/privacy
Google AdWords with conversion tracking
We use the advertising component Google AdWords and conversion tracking on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
We use conversion tracking to advertise our website in a targeted manner. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
If you click on an advert placed by Google, the conversion tracking we use stores a cookie on your end device. These so-called conversion cookies lose their validity after 30 days and are not used for your personal identification.
If the cookie is still valid and you visit a specific page on our website, both we and Google can analyse that you have clicked on one of our ads placed on Google and that you have subsequently been redirected to our website.
Google uses the information obtained in this way to compile statistics for us about visits to our website. We also receive information about the number of users who have clicked on our advert(s) and about the pages of our website that were subsequently accessed. However, neither we nor third parties who also use Google AdWords will be able to identify you in this way.
You can also prevent or restrict the installation of cookies by making the appropriate settings in your Internet browser. At the same time, you can delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support.
Google also offers the following links for further information on this topic and in particular on the options for preventing the use of data:
https://services.google.com/sitestats/de.html
https://www.google.com/policies/technologies/ads/
http://www.google.de/policies/privacy/
Google remarketing or “similar target groups” component from Google
We use the remarketing or “similar target groups” function on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
We use this function to display interest-based, personalised advertising on third-party websites that also participate in the Google advertising network.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
To enable this advertising service, Google stores a cookie with a sequence of numbers on your end device via your Internet browser during your visit to our website. This cookie records both your visit and the use of our website in anonymised form. However, no personal data is passed on in the process. If you subsequently visit the website of a third party that also uses the Google advertising network, adverts may appear that are related to our website or our offers there.
To permanently deactivate this function, Google offers a plugin for the most common internet browsers at
https://www.google.com/settings/ads/plugin.
The use of cookies from certain providers can also be deactivated by opting out, for example via
http://www.youronlinechoices.com/uk/your-ad-choices
or
http://www.networkadvertising.org/choices/.
Cross-device marketing may also allow Google to track your usage behaviour across multiple devices, so that you may be shown interest-based, personalised advertising even if you switch devices. However, this assumes that you have agreed to the linking of your browsing history with your existing Google account.
Google offers further information on Google Remarketing at
https://www.google.com/privacy/ads/.
Microsoft Bing Ads
We use Bing Ads on our website for remarketing and completion tracking. This is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 – 6399, USA, hereinafter referred to as “Microsoft”, which uses the so-called Universal Event Tracking (UEN).
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.
If you click on an advert placed by us on the internet search engine “Bing”, Microsoft will store a cookie for tracking functionality on your end device via your internet browser. This tracking cookie loses its validity after 180 days and is not used to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, both Microsoft and we can recognise that you have clicked on an advertisement placed by us on Bing and have been redirected from there to our website.
Microsoft uses the information collected by the tracking cookie to compile visit statistics for us. This provides us with information about the number of hits on the adverts we have placed on Bing and about the web pages on our website that were subsequently accessed. However, we do not receive any information that would allow us to identify you personally.
In addition, Microsoft may be able to track your user behaviour across several of your end devices via cross-device tracking. This enables Microsoft to show you personalised advertising across devices.
If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your Internet browser. Details on this can be found above under “Cookies”.
If you have a Microsoft account, you can also change the settings for personalised advertising at http://choice.microsoft.com/de-de/opt-out.
Microsoft also offers further information about Bing Ads and the collection and use of data as well as your rights and options for protecting your privacy at https://help.bingads.microsoft.com/#apex/3/de/53056/2 and https://privacy.microsoft.com/de-de/privacystatement.
Newsletter via WhatsApp
You can also receive our free newsletter via the instant messaging service WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of WhatsApp Inc, 1601 Willow Road, Menlo Park, California 94025, USA, both hereinafter referred to as “WhatsApp”. In some cases, user data is processed on WhatsApp servers in the USA.
To receive our newsletter via WhatsApp, you need a WhatsApp user account. You can find details about what data WhatsApp collects during registration in the aforementioned WhatsApp data protection information.
If you then register to receive our newsletter via WhatsApp, the mobile phone number you entered during the registration process will be processed by WhatsApp. Your IP address and the date and time of your registration will also be stored. As part of the further registration process, your consent to the sending of the newsletter will be obtained, the content will be described in detail and reference will be made to this privacy policy.
The legal basis for sending the newsletter and analysing it is Article 6(1)(a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation. You can also block the receipt of the newsletter by making a setting in the WhatsApp software on your end device.
Regiondo (shop software)
We use “Regiondo” to host our shop system and to display our offers and process contracts.
The legal basis is Art. 6 para. 1 lit. b) GDPR (contract initiation/contract processing).
“Regiondo” is a service of Regiondo GmbH, Mühldorfstr. 8, 81671 Munich, Germany.
Regiondo processes the following data on our behalf:
Name, billing and, if applicable, delivery address, e-mail address, payment data, company name if applicable, telephone number if applicable, IP address, information about orders, information about the merchant shops supported by Regiondo that you visit, as well as information about your end device and your Internet browser.
Regiondo also offers further data protection information at
https://pro.regiondo.com/privacy-policy/
Klarna “CHECK-OUT”
For the payment processing of orders via our online shop, we use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as “Klarna”, on our website.
For this purpose, we have integrated Klarna’s so-called check-out into the final order page of our online shop.
The legal basis is the fulfilment of the contract in accordance with Art. 6 para. 1 lit. b.) GDPR. In addition, we have a legitimate interest in offering effective and secure payment options, so that a further legal basis follows from Art. 6 para. 1 lit. f.) GDPR.
By integrating Klarna, your internet browser loads the check-out page from a Klarna server. As a result, the operating system you are using, the type and version of your Internet browser, the website from which the check-out was requested, the date and time of the request and the IP address are transmitted to Klarna – even without you interacting with the check-out page.
As soon as you complete the order in our online shop, the data you enter in the input fields of the check-out page will be processed by Klarna under its own responsibility for the purpose of processing the payment.
For the “PayPal” and “Prepayment” payment methods offered, processing without your further consent is limited to forwarding the payment data to us or PayPal.
For the offered payment methods “purchase on account”, “instalment purchase”, “credit card”, “direct debit” or “instant bank transfer”, the following personal data in particular will be processed by Klarna for the purpose of payment processing and for identity and credit checks:
– Contact information, such as names, addresses, date of birth, gender, email address, telephone number, mobile phone number, IP address, etc.
– Information for processing the order, such as product type, product number, price, etc.
– Payment information, such as debit and credit card details (card number, expiry date and CCV code), invoice details, account number, etc.
If you select the payment method “purchase on account” or “hire purchase”, Klarna collects and uses personal data and information about your previous payment behaviour to decide whether to grant you the desired payment method. In addition, probability values for your future payment behaviour (so-called scoring) are used. The scoring is calculated on the basis of scientifically recognised mathematical-statistical procedures.
Klarna presents further information on the processing described above as well as the applicable data protection provisions with the following link
https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf
