Privacy policy

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not carry out any independent analyses. It merely manages and triggers the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transmitted to Google's parent company in the United States.

Der Einsatz des Google Tag Managers erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an einer schnellen und unkomplizierten Einbindung und Verwaltung verschiedener Tools auf seiner Website. Sofern eine entsprechende Einwilligung  abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und   25 Abs. 1 TDDDG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TDDDG umfasst. Die Einwilligung ist jederzeit widerrufbar. Das Tool sorgt für die Auslösung anderer Tags, die ihrerseits unter Umständen Daten erfassen. Google Tag Manager greift nicht auf diese Daten zu. Wenn auf Domain- oder Cookie-Ebene eine Deaktivierung vorgenommen wurde, bleibt diese für alle Tracking-Tags bestehen, die mit Google Tag Manager implementiert werden. Der Tag Manager verarbeitet und übermittelt Ihre IP-Adresse an Server in den USA.

The data transmitted is pseudonymous only; it is not possible to draw conclusions about your identity. Google bases the transfer of data to the USA on the Transatlantic Data Privacy Framework of 10 July 2023 (TADPF) and, in the case of data transfers to other third countries, on the EU Standard Contractual Clauses. A copy of the EU Standard Contractual Clauses is available on request. This ensures a level of protection comparable to that within the EU.

We have concluded a data processing agreement with Google for the use of Google Tag Manager. Through this agreement, Google assures that it collects data in accordance with the GDPR and ensures the protection of data subjects' rights. Further information on Google Tag Manager can be found in the terms of use for this product.

Processing of personal data for advertising purposes

You may object at any time to the use of your personal data for advertising purposes, either entirely or for specific measures, without incurring any costs other than the basic transmission costs.

Under the legal conditions of Section 7(3) of the German Act Against Unfair Competition (UWG), we are entitled to use the email address you provided when concluding a contract for direct advertising of our own or similar services. You will receive this information from us regardless of whether you have subscribed to a newsletter.

If you do not wish to receive such recommendations from us by email, you may object at any time to the use of your address for this purpose, without incurring any costs other than the basic transmission costs. A notification in text form is sufficient. Of course, every email always includes an unsubscribe link.

Who receives my data?

When we engage a service provider as a data processor, we remain responsible for the protection of your data. All data processors are contractually obligated to treat your data confidentially and to process it only within the scope of providing their services. The data processors we engage receive your data only to the extent they need it to fulfil their respective service.

Ihre Daten werden in unserer Kundendatenbank verarbeitet. Die Kundendatenbank unterstützt die Anhebung der Datenqualität der vorhandenen Kundendaten (Dublettenbereinigung, verzogen/verstorben-Kennzeichen, Adresskorrektur), und ermöglicht die Anreicherung mit Daten aus öffentlichen Quellen. Diese Daten werden zweckmäßig sofern zur Vertragsabwicklung notwendig den Gesellschaften innerhalb der Unternehmensgruppe zur Verfügung gestellt. Das Speichern von Kundendaten erfolgt unternehmensbezogen und getrennt. Bei Vorliegen einer gesetzlichen Verpflichtung sowie im Rahmen der Rechtsverfolgung können Behörden und Gerichte sowie externe Auditoren Empfänger Ihrer Daten sein. Darüber   hinaus   können   zum   Zweck   der   Vertragsanbahnung    und   -erfüllung Versicherungen, Banken, Auskunfteien und Dienstleister Empfänger Ihrer Daten sein.

Hosting

This website is hosted by an external service provider (hosting provider). The personal data collected on this website is stored on the hosting provider's servers. This may include, in particular, IP addresses, contact requests, meta and communication data, contract data, contact data, names, website access data, and other data generated via a website.

The hosting provider is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

Our hosting provider will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

We use the following hosting provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68 | D-02742 Friedersdorf, Germany

Telefon : +49 35872 353-10

Data processing agreement

We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the above-mentioned provider. This is a legally required contract that ensures the provider processes our website visitors' personal data only in accordance with our instructions and in compliance with the GDPR. Further information:

https://all-inkl.com/datenschutzinformationen/

How long is my data stored?

We process your data until the end of the business relationship or until the expiry of the applicable statutory retention periods (e.g., under the German Commercial Code or the German Fiscal Code); beyond that, until the conclusion of any legal disputes in which the data is needed as evidence.

Is personal data transferred to a third country?

As a general rule, we do not transfer any data to a third country. In individual cases, transfers only take place on the basis of an adequacy decision by the European Commission, standard contractual clauses, appropriate safeguards, or your explicit consent.

Security

We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation, and unauthorised access. Our data protection organisation is continuously adjusted, or adjusted as needed, in cooperation with the data protection team. The service providers we engage are contractually obligated to comply with applicable data protection laws (GDPR, BDSG, TDDDG, etc.).

Whenever we collect and process personal data, it is encrypted before transmission. This means your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process, and our privacy policy is continually revised. Please ensure that you have the most up-to-date version.

Rights of affected individuals

 You have the right at any time to request information about, correction of, deletion of, or restriction of the processing of your stored data, the right to object to processing, and the right to data portability and to lodge a complaint, in accordance with the requirements of data protection law.

Right to information:

You may request confirmation from us as to whether and to what extent we process your data.

Right to rectification:

If we process your data and it is incomplete or inaccurate, you may request its correction or completion from us at any time.

Right to erasure:

You may request the deletion of your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protective interests. Please note that there may be reasons that preclude immediate deletion, e.g., in the case of statutory retention obligations.

Regardless of the exercise of your right to erasure, we will delete your data promptly and completely, provided no contractual or legal retention obligation stands in the way.

Right to restriction of processing:

You may request the restriction of the processing of your data if

–           Sie die Richtigkeit der Daten bestreiten, und zwar für eine Dauer, die es uns ermöglicht, die Richtigkeit der Daten zu überprüfen.

–           die Verarbeitung der Daten unrechtmäßig ist, Sie aber eine Löschung ablehnen und stattdessen eine Einschränkung der Datennutzung verlangen,

–           wir die Daten für den vorgesehenen Zweck nicht mehr benötigen, Sie diese Daten aber noch zur Geltendmachung oder Verteidigung von Rechtsansprüchen brauchen, oder

–           Sie Widerspruch gegen die Verarbeitung der Daten eingelegt haben.

Right to data portability:

You may request that we provide you with the data you have provided to us in a structured, commonly used, and machine-readable format, and that you may transmit this data to another controller without hindrance from us, provided that

–           wir diese Daten aufgrund einer von Ihnen erteilten und widerrufbaren Zustimmung oder zur Erfüllung eines Vertrages zwischen uns verarbeiten, und

–           diese Verarbeitung mithilfe automatisierter Verfahren erfolgt.

Where technically feasible, you may request that we transmit your data directly to another controller.

Right to object:

If we process your data on the basis of legitimate interest, you may object to this processing at any time; this also applies to any profiling based on these provisions. We will then no longer process your data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. You may object at any time, without giving reasons, to the processing of your data for the purpose of direct marketing.

Right to lodge a complaint:

If you believe that we have violated German or European data protection law in processing your data, please contact us so we can clarify any questions. You also have the right to contact the supervisory authority responsible for you, i.e., the relevant state data protection authority.

If you wish to exercise any of the rights mentioned above against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this Privacy Policy

 We reserve the right to amend this privacy policy if this becomes necessary due to new technologies. Please ensure that you have the most up-to-date version. If any fundamental changes are made to this privacy policy, we will announce them on our website.

All interested parties and visitors to our website can reach us regarding data protection matters at:

datenschutz@encoviva.de

Version: 0.1