Privacy Policy
With this privacy policy, we want to inform you about the nature, scope, and purpose of the processing of personal data on our website. Personal data is all data that has a personal reference to you, e.g., name, address, email address, or user behavior.
Who is responsible for data processing with us
Responsible for data processing is:
BierTour | Adam Hellmann
Bahnhofstraße 18
48143 Münster
Deutschland
+49 (0) 251 – 20835300
info@biertour.de
Processing of your data as part of our company’s core activities
We process the personal data transmitted to us as part of the contractual and pre-contractual relationships existing between us. The scope, nature, purpose, and necessity of the processing depend on the respective underlying contractual relationship. For this purpose, we store and process your data in the computer systems we use. The data we process includes all those data that you have provided for the purpose of utilizing contractual or pre-contractual services and that are required for processing your request or the contract concluded between us.
This may particularly include the following data:
- Name and address
- Email address and phone number
- Contract data
- Payment data
The processing is limited to those data that are necessary and appropriate for responding to inquiries and/or fulfilling a contract concluded between you and us. Personal data is only disclosed to third parties if this is necessary for the purpose of providing the service or in the context of organizing our business for financial accounting and compliance with legal obligations. In this case, only those data are transferred to external service providers that are necessary and appropriate for fulfilling the contract or processing financial accounting and complying with legal obligations. The processing by us is carried out in accordance with your instructions or statutory provisions. Legal basis: The processing of your personal data and the transfer to third parties takes place in accordance with Art. 6 para. 1 lit. b) GDPR and serves to fulfill the contract between you and us. Otherwise, we only disclose data to third parties if there is a legal obligation to do so, Art. 6 para. 1 lit. c) GDPR, or if there is a legitimate interest in doing so, Art. 6 para. 1 lit. f. GDPR. This is the case, for example, if it is necessary for the enforcement of our claims. Deletion: Your data will be deleted as soon as it is no longer required for fulfilling contractual or statutory retention obligations or for handling any warranty and similar obligations. Statutory retention periods remain unaffected.
Newsletter
The newsletter is sent using “Sendy”, a newsletter dispatch platform hosted by our website processor. “Sendy” exclusively uses the Amazon Cloud Service SES data center in Ireland for sending emails. (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States)
You can view the privacy policy of the mailing service provider here: https://sendy.co/privacy-policy.
The mailing service provider is engaged on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. GDPR and an order processing agreement pursuant to Art. 28 para. 3 sentence 1 GDPR. The mailing service provider may use the data of recipients in pseudonymized form, i.e., without assignment to a user, for optimization or improvement of its own services, e.g., for technical optimization of dispatch and presentation of the newsletter, or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contact them themselves or to pass the data on to third parties.
Webhosting
We use an Internet service provider to maintain our online presence, on whose server the website is stored (hosting) and who makes our site available on the Internet. In doing so, the Internet service provider processes contact data, content data, contract data, usage data, customer data, as well as meta and communication data on our behalf. Name and address of the Internet service provider: ALL-INKL.COM Hauptstraße 68 | D‑02742 Friedersdorf Germany Its privacy policy can be viewed here: https://all-inkl.com/datenschutzinformationen/ Legal basis: The Internet service provider processes the aforementioned data on our behalf, Art. 28 GDPR. The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offering, Art. 6 para. 1 lit. f) GDPR.
If you merely use our website for informational purposes, our Internet service provider collects only those personal data that your browser transmits to its server. These are the following data:
- IP address
- the date and time of access to our website
- time zone difference to Greenwich Mean Time (GMT)
- access status (HTTP status)
- the amount of data transferred
- the Internet service provider of
- the accessing system
- the browser type and version used by you
the operating system used by you - the website from which you may have arrived at our website
- the pages or subpages you visit on our website.
The aforementioned data are stored as log files on the servers of our Internet service provider. This is necessary to display the website on the end device you are using and to ensure stability and security. Our legitimate interest in data processing lies in these purposes. Legal basis: The data processing is based on our legitimate interest in an efficient and secure provision of our Internet offering, Art. 6 para. 1 lit. f) GDPR. Duration: The aforementioned data for providing our website are stored for a period of 7 days and then deleted.
Information on the contact options we provide
If you contact us via email, social media, phone, fax, mail, our contact form, or otherwise, and provide us with personal data such as your name, phone number, or email address, or make further statements about yourself or your request, these data are stored and processed in our company to handle your request. Legal basis: If you submit your request as part of contractual or pre-contractual relationships with us, the legal basis for processing your data is Art. 6 para. 1 lit. b. GDPR. If your request does not fall under one of the aforementioned categories, our legitimate interest in processing your data lies in properly and appropriately responding to your request, Art. 6 para. 1 lit. f GDPR. Deletion: The personal data we collect will be deleted once they are no longer necessary. We review the necessity every 2 years. You can also revoke the data processing at any time.
Online-Shop
If you use our online shop to place orders, we need certain data to process your order. This includes in particular your name, address and electronic contact details, information for processing the payment, and the services used. These data are stored by us. The information you provide in the mandatory fields of the order form is absolutely necessary for establishing and fulfilling the contract. In particular, we use the data transmitted to us by you to
- identify you as our customer
- process your order, fulfill and complete it
- contact you
- issue invoices to you
- handle any liability claims
- assert contractual claims against you
Legal basis: The legal basis for processing your data, regarding the processing of your order, is Art. 6 para. 1 lit. b GDPR. This also applies to processing operations required for carrying out pre-contractual measures.
We only disclose your personal data to third parties if:
the disclosure is necessary under Art. 6 para. 1 sentence 1 lit. f GDPR for asserting, exercising, or defending legal claims and there is no reason to assume that you have a predominantly protectable interest in not disclosing your data,
there is a legal obligation to do so under Art. 6 para. 1 sentence 1 lit. c GDPR,
this is necessary under Art. 6 para. 1 sentence 1 lit. b GDPR for processing the contract concluded with you (e.g., disclosure of data to the logistics company commissioned with delivery or for payment processing).
Furthermore, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we limit the scope of the transmitted data to the necessary minimum.
If you place an order, register for a user account, or log in again, we store your IP address and the time of the respective user action. The purpose of the storage is our legitimate interests, as well as yours, in protecting against misuse and other unauthorized use. Legal basis: The legal basis for this is Art. 6 para. 1 lit. f GDPR. These data are not disclosed to third parties unless the disclosure is necessary for pursuing our claims or there is a legal obligation to do so under Art. 6 para. 1 lit. c GDPR.
Deletion: Due to commercial and tax law requirements, we are obliged to store your address, payment, and order data for a period of 10 years. After the expiry of statutory warranty rights (2 years), however, we restrict processing to the effect that your data are only used for complying with legal obligations.
Your rights under the GDPR
Under the GDPR, you have the following rights, which you can assert at any time with the controller named in section 1 of this privacy policy:
Right to information: Under Art. 15 GDPR, you can request confirmation as to whether and which personal data we process about you. In addition, you can request free information from us about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, and the origin of your data if they were not collected from you. Furthermore, you have the right to information about whether your personal data have been transferred to a third country or to an international organization. If this is the case, you have the right to information about the appropriate safeguards in connection with the transfer.
Right to rectification: Under Art. 16 GDPR, you can request the rectification or completion of inaccurate or incomplete personal data stored about you.
Right to erasure: Under Art. 17 GDPR, you have the right to request the erasure of your personal data stored with us, insofar as we do not need to process them for the following purposes:
to fulfill a legal obligation,
to assert, exercise or defend legal claims,
to exercise the right to freedom of expression and information, or
for reasons of public interest mentioned in Art. 17 para. 3 lit. c and d GDPR.
Right to restriction: Under Art. 18 GDPR, you have the right to request restriction of processing of your personal data if
you contest the accuracy of the data, for a period enabling us to verify the accuracy of the personal data,
the processing of your data is unlawful, but you object to their erasure and instead request the restriction of the use of the data,
we no longer need the personal data for the purposes of processing, but you need them for asserting, exercising or defending legal claims
you have objected to the processing of your data under Art. 21 GDPR, but it is not yet clear whether the legitimate reasons overriding your interests prevail.
Right to notification: If you have asserted the right to rectification, erasure, or restriction of processing against us, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of the rectification or erasure of the data or restriction of processing requested by you, unless this proves impossible or involves a disproportionate effort. You have the right to be informed by us about these recipients.
Right to data portability: Under Art. 20 GDPR, you may request that we provide you with the personal data concerning you that you have provided to us in a structured, common, and machine-readable format or request the transfer to another controller.
Right to lodge a complaint: Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. For this, you can contact the supervisory authority of your place of residence, workplace, or our company headquarters.
Right of withdrawal
Under Art. 7 para. 3 GDPR, you have the right to withdraw your given consent to the processing of your data from us at any time. The withdrawal declared by you does not affect the lawfulness of the processing of your personal data carried out until the withdrawal.
Right of objection
You have the right, on grounds relating to your particular situation, at any time to object to the processing of personal data concerning you based on an interests balance (Art. 6 para. 1 lit. f GDPR). This is particularly the case if the data processing is not necessary for fulfilling a contract. If you exercise your right of objection, we ask you to state the reasons. We will then no longer process your personal data unless we can demonstrate to you compelling legitimate grounds for the processing which override your interests.
Irrespective of the above, you have the right at any time to object to the processing of your personal data for purposes of advertising and data analysis.
Please direct your objection to the contact address of the controller given above.
The mailing service provider may use the data of recipients in pseudonymized form, i.e., without assignment to a user, for optimization or improvement of its own services, e.g., for technical optimization of dispatch and presentation of the newsletter, or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to contact them themselves or to pass the data on to third parties.
Google Maps
We use components of “Google Maps”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: “Google”), on our website.
Google Maps visually displays geographic information. In doing so, Google collects and processes the IP address of the visitor. This is transmitted to Google regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address is assigned to your Google account if you are logged into it during your visit to our website. These data are transferred to external Google servers in the USA. Google is a participant in the Privacy Shield agreement and certified for data processing according to European standards. Google may disclose these data collected via the technical process to third parties under certain circumstances. Purpose: The integration of Google Maps serves to simplify visualization and navigation when visiting our location. Google’s data processing is for the purpose of advertising, market research, website design, and providing demand-oriented advertising. Legal basis: We use Google Maps based on our legitimate interest in optimizing and designing our online offering, Art. 6 para. 1 lit. f GDPR. Prevention: You can prevent the assignment of data by refraining from using Google Maps on our website and logging out of your Google account before your visit. Additionally, you can deactivate JavaScript in your browser to prevent map display. We also refer to Google’s privacy policy at the following link http://www.google.com/intl/de_de/help/terms_maps.html
Information about the third-party provider:
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: http://www.google.com/analytics/terms/de.html
Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy
Data usage by Google when using websites or apps of our partners: https://www.google.com/intl/de/policies/privacy/partners
Data usage for advertising purposes: http://www.google.com/policies/technologies/ads
Personalized advertising by Google: http://www.google.de/settings/ads
Google has submitted to the Privacy Shield Agreement between the European Union and the USA and certified itself. Google thereby commits to complying with the standards and regulations of European data protection law. You can find more information in the linked entry below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active
Google Web Fonts
We use “Google Web Fonts”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.
The service enables us to integrate external fonts (Web Fonts) into the design of our website and display them correctly when rendering the website. This gives us certain design options to make the design of our website more user-friendly. The integration of these Web Fonts is done via a server call. The fonts are delivered compressed from this server to your browser and unpacked there. This server is regularly located in the USA. When you visit one of our pages where we integrate Google Fonts, Google is informed which of our websites you have visited. In addition, the IP address of the visitor’s end device’s browser is stored by Google. Purpose: The aforementioned interests represent the purpose of using Google Web Fonts. Legal basis: We use Google Web Fonts based on our legitimate interest in optimizing and designing our online offering, Art. 6 para. 1 lit. f GDPR.
Information about the third-party provider:
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: http://www.google.com/analytics/terms/de.html
Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy
Data usage by Google when using websites or apps of our partners: https://www.google.com/intl/de/policies/privacy/partners
Data usage for advertising purposes: http://www.google.com/policies/technologies/ads
Personalized advertising by Google: http://www.google.de/settings/ads
Google has submitted to the Privacy Shield Agreement between the European Union and the USA and certified itself. Google thereby commits to complying with the standards and regulations of European data protection law. You can find more information in the linked entry below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Our online presences on social networks
We maintain online presences within the social networks listed below. When you visit one of these presences, the respective provider collects and processes your usage data. This is usually done through cookies stored on the end device you are using. See the corresponding heading above for the term “cookie”. The cookies store your usage behavior and interests and create corresponding usage profiles. Usage profiles may also store data independently of the device you are using. This is particularly the case if you are a member of the respective platform and logged in there.
The collected data are usually used by the provider for advertising and market research purposes by creating usage profiles from your usage behavior. These can in turn be used by the providers to serve you interest-based advertising. You have a right of objection to the creation of user profiles. To exercise this, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. To prevent such linking of your data, you can log out of the provider’s service before visiting our site.
For what purpose and to what extent data are collected by the provider, you can refer to the respective privacy policies of the providers provided below. We ourselves have no influence on which data are recorded and how these data are used by the provider. If you request specific information here or wish to exercise your data subject rights, you can do this most effectively directly with the respective provider, as only they have access to your data.
We would like to point out that your user data may be transferred and processed outside the European Union. In this case, there is a risk that the enforcement of your data subject rights may be complicated. Those US providers certified under Privacy Shield have committed to complying with EU data protection standards. You can find information on whether the respective provider has such a certificate in the details of the providers listed below.
Legal basis: If you have been asked for consent to data processing by one of the providers listed below, the legal basis for processing is Art. 6 para. 1 lit. a GDPR. Otherwise, the processing of your data is based on our legitimate interests in contacting you and communicating with you, Art. 6 para. 1 lit. f GDPR. Prevention: For the respective objection options (opt-out), we refer to the provider information linked below.
We maintain online presences on the following social networks:
Instagram
Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 – USA
Privacy policy available at: https://help.instagram.com/155833707900388
Opt-Out: http://instagram.com/about/legal/privacy
Facebook
Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 – USA.
EU location: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland
Privacy policy available at: https://www.facebook.com/about/privacy/
Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
Google Analytics
We use “Google Analytics”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.
To capture and statistically evaluate visitor flows on our online presence, we use Google Analytics. Google Analytics collects data such as the website from which you arrived at our online presence (so-called referrer), which subpages of the website you accessed, how often and for how long a subpage was viewed, and which interactions you performed. To collect and store these data, Google Analytics sets a cookie on the end device you are using (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymize your IP address, so that it is shortened and can no longer be assigned to your visit to our website. Other transmitted information is not linked to the anonymized IP address by Google. The information generated in this way is transmitted to Google servers in the USA and stored there. Google may disclose these personal data collected via the technical process to third parties under certain circumstances. We have concluded an order processing agreement with Google. Google is entitled and obliged to evaluate the obtained information for us and to create statistical reports for us on the nature and scope of website usage. Through these statistics, we can continuously improve our offering, conduct a cost-benefit analysis of our internet marketing, and make our online presence more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics based on our legitimate interest in analyzing, optimizing, and economically operating our online offering, Art. 6 para. 1 lit. f GDPR. Deletion: The data we collect and transmit in this way are automatically deleted after 26 months. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available at https://tools.google.com/dlpage/gaoptout?hl=de. However, you may then no longer be able to use all functions of our website to their full extent. Alternatively, you can prevent the storage of cookies by setting an so-called opt-out cookie, which prevents data from you being collected on our website in the future. Please click on the following <link> for this. Additionally, you have the option to prevent the storage of cookies by setting this in your browser. Cookies already set can be deleted by you at any time.
Information about the third-party provider:
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use: http://www.google.com/analytics/terms/de.html
Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy policy: http://www.google.de/intl/de/policies/privacy
Data usage by Google when using websites or apps of our partners: https://www.google.com/intl/de/policies/privacy/partners
Data usage for advertising purposes: http://www.google.com/policies/technologies/ads
Personalized advertising by Google: http://www.google.de/settings/ads
Google has submitted to the Privacy Shield Agreement between the European Union and the USA and certified itself. Google thereby commits to complying with the standards and regulations of European data protection law. You can find more information in the linked entry below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Ads
We use “Google Ads”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.
Google Ads is a service for displaying online advertising in the form of ads. The ads are shown as search results in search engine results or in the Google advertising network. With Google Ads, we set specific keywords. Our ads are then displayed by Google in search engine results when you retrieve a search result from Google’s search engine that is related to the keyword. In the Display Network, the ad is shown on thematically related pages. If you click on one of the ads, you are redirected to the website we are promoting. Google Ads sets a cookie for this (see the term above under the heading Cookies). This allows both Google and us to track whether you arrived at our site via our ad and whether you performed any further actions here, such as making a purchase, using a contact form, or calling us. For this purpose, the cookie collects the pages you visit, including your IP address, and transmits them to Google servers in the USA (Conversion Tracking). Google evaluates these data to create a report with statistical information on the number of visitors generated via the advertising and the success of the advertising measure. The reports show, among other things, the total number of users redirected to our website via our ads. In addition, the reports contain information on the end devices and browsers of the users, the locations where the users were located, and the times when the ad was clicked. However, the reports do not contain any information that could personally identify you as a user of our site. Purpose: Through the ads, we can specifically direct visitor flows to our pages. The statistical evaluations and reports created by Google enable us to optimize our ads. Legal basis: We use Google Ads based on our legitimate interest in analyzing, optimizing, and economically operating our online offering, Art. 6 para. 1 lit. f GDPR. Prevention: You can prevent cookies from being set by adjusting your browser settings. Cookies already set can be deleted in your browser. In addition, you have the option to object to interest-based advertising by visiting the following link and manually deactivating the relevant options: https://adssettings.google.com/authenticated?hl=de.
Information about the third-party provider:
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of use for Google Analytics: https://www.google.com/analytics/terms/de.html
Privacy overview: https://support.google.com/analytics/answer/6004245?hl=de
Privacy policy: https://policies.google.com/privacy?hl=de&gl=de
Data usage by Google when using websites or apps of our partners: https://www.google.com/intl/de/policies/privacy/partners
Data usage for advertising purposes: https://policies.google.com/technologies/ads?hl=de
Here you have the opportunity to decide for yourself whether Google serves you personalized advertising: https://adssettings.google.de/authenticated
Google has submitted to the Privacy Shield Agreement between the European Union and the USA and certified itself. Google thereby commits to complying with the standards and regulations of European data protection law. You can find more information in the linked entry below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Google Remarketing
We use “Google Remarketing”, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, on our website.
Google Remarketing is a feature of Google AdWords (see above under the heading Google AdWords). Google Remarketing enables us to address you specifically with advertising banners or text ads in the Google Display Network. On the pages of our online presence where we have activated the service, Google integrates so-called counting pixels. When you visit one of our pages, a counting pixel sets an individual cookie on the end device you are using. For the term cookies, please refer to the explanations above under the corresponding heading. The cookie stores information about which websites you have visited, which content you are interested in, and which offers you have clicked on. In addition, information about the browser and operating system you are using, referring websites, your visit time, and other data on the use of the online offering is stored. Your IP address is also collected and transmitted to external Google servers in the USA in pseudonymized form, unless you have expressly permitted Google to process the data without pseudonymization. Purpose: The use of Google Remarketing allows us to display our advertising more specifically to you. This enables us to present ads that match your interests. Legal basis: We use Google Remarketing based on our legitimate interest in analyzing, optimizing, and economically operating our online offering, Art. 6 para. 1 lit. f GDPR. Prevention: You can prevent the storage of cookies by setting this in your browser or by setting an opt-out cookie by clicking the unsubscribe button at the following link http://www.google.com/ads/preferences. However, you may then no longer be able to use all functions of our website to their full extent. To ensure that no further data transmission occurs, the opt-out cookie must be installed on each of the systems you use.
Information about the third-party provider:
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of Service: http://www.google.com/analytics/terms/de.html
Privacy Overview: http://www.google.com/intl/de/analytics/learn/privacy.html
Privacy Policy: http://www.google.de/intl/de/policies/privacy
Data Usage by Google for Your Use of Our Partners’ Websites or Apps: https://www.google.com/intl/de/policies/privacy/partners
Data Usage for Advertising Purposes: http://www.google.com/policies/technologies/ads
Personalized Advertising by Google: http://www.google.de/settings/ads
Google has submitted to the Privacy Shield Agreement between the European Union and the USA and has certified itself. This commits Google to comply with the standards and regulations of European data protection law. Further information can be found in the linked entry below: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
Facebook Pixel
We use the Facebook Pixel, Custom Audiences, and Facebook Conversion features of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, on our website.
Facebook Pixel is an analysis tool that allows us to evaluate the effectiveness of the advertisements we run on Facebook (so-called “Facebook Ads”). It enables us to target audiences for our advertisements. This allows us to display our Facebook Ads only to Facebook users who have previously visited one of our websites. Additionally, we can track via Facebook Pixel whether you were redirected to our website after clicking on one of our Facebook Ads. This enables us to serve you advertisements tailored to your interests. For this purpose, we have implemented a tracking pixel from Facebook on our website. This is a small graphic that enables a log file recording and log file analysis. When you visit our website, a direct connection to Facebook’s servers is established. To our knowledge, Facebook receives information about which page of our online presence you have visited or which of our Facebook Ads you have clicked on. If you are logged in to Facebook, Facebook can assign your visit to our website or the click on our Facebook Ads to your Facebook account. It is also not ruled out that Facebook reads and stores your IP address and other identifying features, even if you are not logged in to Facebook. Details on how the Facebook Pixel works can be found here: https://www.facebook.com/business/help/651294705016616. We have no influence on the amount, quality, or storage duration of the transmitted data. Facebook may pass your data on to third parties. Facebook is a participant in the Privacy Shield Agreement and certified for data processing according to European standards.
Purpose: We use Facebook Pixel to show you advertising that is interesting to you and to make our website more attractive.
Legal Basis: We use Facebook Pixel based on our legitimate interest in the analysis, optimization, and economic operation of our online offering, Art. 6 Para. 1 lit. f GDPR.
Prevention: You can deactivate Facebook Custom Audiences by logging into your Facebook account and setting this under the following link: https://www.facebook.com/settings/?tab=ads. Additionally, you can disable interest-based advertising on the following pages: http://www.aboutads.info/choices and http://www.youronlinechoices.com/uk/your-ad-choices/. You can also prevent the use of cookies for reach measurement and advertising purposes via the Network Advertising Initiative offer, which you can access here: http://optout.networkadvertising.org/ or here: http://www.aboutads.info/choices. Alternatively, you can also declare your objection via this website: http://www.youronlinechoices.com/uk/your-ad-choices/.
Information about the Third-Party Provider:
Registered office within the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Privacy Policy: https://www.facebook.com/policy.php
Facebook Pixel: https://www.facebook.com/business/help/651294705016616
Klarna
We offer payment processing via the payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden, on our website.
The following data of yours is transmitted to Klarna or collected by Klarna: first and last name, address, date of birth, email address, phone number, IP address, and the data necessary for invoice purchase processing related to the order, such as the number of items, details of the ordered products, item number, invoice amount, and taxes in percent. In addition, Klarna collects information about previous purchases you made with Klarna, your previous payment behavior, and probability values regarding your future behavior. The manner of using Klarna is also recorded by Klarna, e.g., information about devices you use for ordering or your location.
Purpose: The transmission of this data is to enable Klarna to create an invoice for your purchase with the desired invoice processing and to perform an identity check. This allows, among other things, the detection of fraudulent activities and the prevention of data misuse. In addition, the data is transmitted so that Klarna can assess your creditworthiness or Klarna can pass the data to credit agencies for assessing your creditworthiness in the form of a credit check. The collected data may also be used by Klarna for analysis purposes, particularly for customer analysis, risk analysis, and data analysis for the development and improvement of the services offered by Klarna.
Legal Basis: The legal basis for the aforementioned use of the data is Art. 6 Para. 1 lit. b GDPR.
Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Further information on Klarna’s terms of use and data protection can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
Prevention: You can revoke your consent to the use of personal data from Klarna at any time. Despite revocation, Klarna may still be entitled to process, use, and transmit personal data that is strictly necessary for contractual payment processing.
PayPal
We offer payment processing via the payment service provider PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg, Luxembourg) on our website.
If you choose to pay via PayPal, the following data of yours will be transmitted to PayPal as part of the order: first and last name, address, date of birth, email address, phone number, IP address, and the data necessary for processing the respective order. The transmission of this data is to enable PayPal to perform an identity check for your purchase processing. This allows, among other things, the detection of fraudulent activities and the prevention of data misuse. In addition, the data is transmitted so that PayPal can, if necessary, assess your creditworthiness or PayPal can pass the data to credit agencies for assessing your creditworthiness in the form of a credit check. PayPal uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The collected data may also be used by PayPal for analysis purposes, particularly for customer analysis, risk analysis, and data analysis for the development and improvement of the services offered by PayPal.
Legal Basis: The legal basis for the aforementioned use of the data is Art. 6 Para. 1 lit. b GDPR.
Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months.
Revocation: You can revoke your consent to the use of personal data from PayPal at any time. Despite revocation, PayPal may still be entitled to process, use, and transmit personal data that is strictly necessary for contractual payment processing.
Information about the third-party provider:
Terms of Use and Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full#
Sofortüberweisung
We offer payment processing via the Instant Transfer payment system of the payment service provider SOFORT (SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany) on our website.
If you choose to pay via Instant Transfer, the following data of yours will be transmitted to Instant Transfer as part of the order: first and last name, address, date of birth, email address, phone number, IP address, and the data necessary for processing the respective order. Additionally, you transmit the TAN number generated for the respective payment process as well as the PIN of your online banking account. The transmission of this data is to enable Instant Transfer to perform an identity check for your purchase processing. This allows, among other things, the detection of fraudulent activities and the prevention of data misuse. In addition, the data is transmitted so that Instant Transfer can query your account balance and, if necessary, assess your creditworthiness or Instant Transfer can pass the data to credit agencies for assessing your creditworthiness in the form of a credit check. Instant Transfer uses the result of the credit check regarding the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The collected data may also be used by Instant Transfer for analysis purposes, particularly for customer analysis, risk analysis, and data analysis for the development and improvement of the services offered by Instant Transfer.
Legal Basis: The legal basis for the aforementioned use of the data is Art. 6 Para. 1 lit. a GDPR, Art. 6 Para. 1 lit. b GDPR.
Deletion: The data collected and transmitted by us in this way will be automatically deleted after 26 months. Further information on the terms of use and data protection of Instant Transfer can be found at https://www.sofort.de/datenschutz.html.
Revocation: You can revoke your consent to the use of personal data from Instant Transfer at any time. Despite revocation, Instant Transfer may still be entitled to process, use, and transmit personal data that is strictly necessary for contractual payment processing.
Security Measures
We implement technical and organizational security measures according to the state of the art to comply with data protection laws and protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.
Current Validity and Changes
This privacy policy is currently valid and reflects the status of February 2020. Due to changed legal or regulatory requirements, it may be necessary to adapt this privacy policy.
This privacy policy was created with the help of SOS Recht. You can find the privacy policy generator here. SOS Recht is an offer from Mueller.legal Rechtsanwälte Partnerschaft with headquarters in Berlin.