Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analyzed when your visit this website. Such analyses are performed primarily with what we refer to as analysis programs.

For detailed information about these analysis programs please consult our Data Protection Declaration below.

2. Hosting

We are hosting the content of our website at the following provider:

All-Inkl

The Provider is the ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany (hereinafter “All-Inkl”). For details, please visit the privacy policy of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable representation of our website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:

Cilentano GmbH
Adlergasse 1
93047 Regensburg

Phone: +49941 / 567646-0
E-mail: info@cilentano.de

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Recipients of personal data

In the scope of our business activities, we cooperate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is required as part of the fulfillment of a contract, if we are legally obligated to do so (e.g., disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclosure of this data. When using processors, we only disclose personal data of our customers on the basis of a valid contract on data processing. In the case of joint processing, a joint processing agreement is concluded.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If you are under an obligation to share your payment information (e.g. account number if you give us the authority to debit your bank account) with us after you have entered into a fee-based contract with us, this information is required to process payments.

Payment transactions using common modes of paying (Visa/MasterCard, debit to your bank account) are processed exclusively via encrypted SSL or TLS connections. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the communication with us is encrypted, third parties will not be able to read the payment information you share with us.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for promotional purposes.

Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, the processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Borlabs Cookie

Our website uses the Borlabs consent technology to obtain your consent to the storage of certain cookies in your browser or for the use of certain technologies and for their data privacy protection compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing policies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6(1)(c) GDPR.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

The type and version of browser used
The used operating system
Referrer URL
The hostname of the accessing computer
The time of the server inquiry
The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.

Request by e-mail, telephone, or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Registration on this website

You have the option to register on this website to be able to use additional website functions. We shall use the data you enter only for the purpose of using the respective offer or service you have registered for. The required information we request at the time of registration must be entered in full. Otherwise, we shall reject the registration.

To notify you of any important changes to the scope of our portfolio or in the event of technical modifications, we shall use the e-mail address provided during the registration process.

We shall process the data entered during the registration process on the basis of your consent (Art. 6(1)(a) GDPR).

The data recorded during the registration process shall be stored by us as long as you are registered on this website. Subsequently, such data shall be deleted. This shall be without prejudice to mandatory statutory retention obligations.

5. Social media

Instagram

We have integrated functions of the public media platform Instagram into this website. These functions are being offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If the social media element has been activated, a direct connection between your device and Instagram’s server will be established. As a result, Instagram will receive information on your visit to this website.

If you are logged into your Instagram account, you may click the Instagram button to link contents from this website to your Instagram profile. This enables Instagram to allocate your visit to this website to your user account. We have to point out that we as the provider of the website and its pages do not have any knowledge of the content of the data transferred and its use by Instagram.

If your approval (consent) has been obtained the use of the abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be revoked at any time. If your consent was not obtained, the use of the service will occur on the basis of our legitimate interest in making our information as comprehensively visible as possible on social media.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to the collection of the data and its forwarding to Facebook or Instagram. The processing by Facebook or Instagram that takes place after the onward transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found under: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the privacy information when using the Facebook or Instagram tool and for the privacy-secure implementation of the tool on our website. Facebook is responsible for the data security of Facebook or Instagram products. You can assert data subject rights (e.g., requests for information) regarding data processed by Facebook or Instagram directly with Facebook. If you assert the data subject rights with us, we are obliged to forward them to Facebook.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For more information on this subject, please consult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.

6. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is summarized in a user-ID and assigned to the respective end device of the website visitor.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

etracker

This website uses the analysis service etracker. The provider of this service is the etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

etracker allows us to analyze the behavior patterns of our website visitors. For this purpose, etracker, among other things, records your abridged IP-address, geographic information (does not exceed details such as the city level), log files and other information your browser transfers to our webserver when you access the website. As a result, we are able to measure the website interactions, such as the length of the visit, conversions (e.g., registrations, purchase orders), scroll events, clicks and page access by the website visitor. These interactions are allocated to the website visitor for the duration of the current day, so that the data can be recognized during follow-up visits. Once the day has ended, visitor recognition is no longer possible.

No cookies will be stored in your browser in the absence of your consent. Moreover, no information is read in the archive of your device. Using this analysis tools without cookies occurs on the basis of Art. 6(1)(f) GDPR. The website operator has legitimate interest in the analysis of user patterns so that the operator can optimize the web portfolio and the ads. The rights and principal liberties of the data subject are protected. During the analysis with etracker, the IP address is anonymized as soon as possible, and the recognition of visitors is possible only for the duration of the current day.

If your respective consent has been obtained, processing will occur exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

You have the option to deactivate etracker here:

Data processing

Google Ads

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.

Google Conversion-Tracking

This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With the assistance of Google Conversion Tracking, we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en

7. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. Further data is not collected or only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.

Brevo

This website uses Brevo for the sending of newsletters. The provider is the Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo services can, among other things, be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are archived on servers of Sendinblue GmbH in Germany.

Data analysis by Brevo

Brevo enables us to analyze our newsletter campaigns. For instance, it allows us to see whether a newsletter message has been opened and, if so, which links may have been clicked. This enables us to determine, which links drew an extraordinary number of clicks.

Moreover, we are also able to see whether once the e-mail was opened or a link was clicked, any previously defined actions were taken (conversion rate). This allows us to determine whether you have made a purchase after clicking on the newsletter.

Brevo also enables us to divide the subscribers to our newsletter into various categories (i.e., to “cluster” recipients). For instance, newsletter recipients can be categorized based on age, gender, or place of residence. This enables us to tailor our newsletter more effectively to the needs of the respective target groups.

If you do not want to permit an analysis by Brevo, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.

For detailed information on the functions of Brevo please follow this link: https://www.brevo.com/de/newsletter-software/.

Legal basis

The data is processed based on your consent (Art. 6(1)(a) GDPR). You may revoke any consent you have given at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to your revocation.

Storage period

The data deposited with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter or the newsletter service provider and deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored for other purposes with us remain unaffected.

After you unsubscribe from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist, if such action is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

For more details, please consult the Data Protection Regulations of Brevo at: https://www.brevo.com/de/datenschutz-uebersicht/ and https://www.brevo.com/de/legal/privacypolicy/.

Data processing

8. Plug-ins and Tools

Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google Maps

This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. In case Google Maps has been activated, Google has the option to use Google Fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to correctly display text and fonts.

We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

9. eCommerce and payment service providers

Payment services

We integrate payment services of third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) are processed by the payment service provider for the purpose of payment processing. For these transactions, the respective contractual and data protection provisions of the respective providers apply. The use of the payment service providers is based on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient, and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.

We use the following payment services / payment service providers within the scope of this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Privacy Policy

With this data privacy statement, the Cilentano GmbH („Cilentano“) informs you about the ways personal data are collected, processed and used on its website and about the rights the persons concerned have got. What applies in any case is the following: We collect, process and use your personal data only insofar as is allowed according to the ‘Bundesdatenschutzgesetz’ (BDSG; Federal Data Protection Act) and the ‘Datenschutzgrundverordnung’ (DSGVO; General Data Protection Regulation) as well as the area-specific data protection regulations.

Responsible controller, see Art. 4 no. 7 of the EU-Datenschutzgrundverordnung (DSGVO), is the Cilentano GmbH, Adlergasse 1, 93047 Regensburg (see our ‘Legal notice‘). A data protection officer is not appointed and Cilentano is not legally obligated to appoint one.

The controller has taken and implemented several technical and organizational measures to ensure as complete a protection as possible of the personal data processed via this website. Nevertheless, Internet-based data transfer might hold security gaps and complete protection can therefore not be guaranteed. For this reason you are free to transfer personal data to us by other means, e.g. by phone.

§ 1 Personal data

Personal data are all data relating to your person and which you can be identified by (e.g. name, address, e-mail address, user behavior).

§ 2 Collection and storage of personal data as well as manner and purpose of their use

(1) Use for information and visit to our website

Should you use our website only to gather information, i.e. if you do not register or transfer information to us in any other way, we collect only the personal data your browser transfers to our server automatically. This information is temporarily stored in a so-called log file.

Should you visit our website, we collect the following data, which are recorded without your participation and stored until they are automatically erased:

– IP address of inquiring browser

– Date and time of inquiry / visit

– Website from where you were referred to our site (referrer-URL)

– Time zone offset from GMT

– Content of request (precise page)

– Access status/http status code

– Amount of data transferred

– Website which has sent the request

– Browser used / type of browser, as the case may be the operating system of your computer, its interface as well as the name of your access provider

– Language and version of the browser software

– Other similar data and information serving to avert any threats in case of attacks on our information technology systems

We collect the data for the following purposes:

– to ensure that connection with our website is easily established

– to ensure convenient use of our website

– to evaluate the security and stability of the system as well as

– to ensure the permanent efficiency of our information technology systems and the technique of our website

– to provide law enforcement authorities with the necessary information for prosecution in the case of a cyber attack

– for further administrative purposes.

Legal basis for the processing of data is Art. 6 Abs. 1 S. 1 lit. f DSGVO. Our legitimate interest can be derived from the purposes for the collection of data mentioned above.

When using and processing these general data and pieces of information we draw no inference on the person concerned. The anonymized data and information are evaluated statistically as well as with the aim of increasing data protection and security at our agency in order to ensure a high level of protection for the personal data we process. The anonymized data of the server log files are stored apart from all the personal data transmitted by an individual concerned.

Furthermore, we use cookies and analysis services on our website. Detailed information about this is found as of § 3 of this data privacy statement.

(2) Contact by e-mail / contact form

When you contact us by e-mail or by using our contact form, we collect necessary personal data (name, first name, address, e-mail address, phone number (landline and/or mobile)), information required for your journey. Collecting and storing these data enables us to identify you as a customer, to answer your questions and to deal with the booking concerning your journey. The processing of these data for the purpose of establishing contact with us follows your contact inquiry; pursuant to Art. 6 Abs. 2 S. 1 lit. b DSGVO it is required for the purposes mentioned in order to deal adequately with your non-binding inquiry or your booking request and with regard to both parties’ performance of obligations arising from the travel contract.

The personal data given by the person concerned are collected and stored by the controller for internal use only and for appropriate purposes. The controller might pass them on to one or several processors, e.g. a parcel service, who, on their part, deal with the personal data only on an internal basis and on behalf of the controller.

When registering on the website of the controller, the concerned person’s IP address, assigned by his/her Internet service provider (ISP), as well as the date and time of registration are also stored. Storage of these data is based on the fact that it is the only way to prevent abuse of our services and that, in the case of a criminal offense, these data might help solve it. Thus, storage of these data is required for the security of the controller. These data are not passed on to third parties, unless there is a legal obligation to pass them on or unless they are needed for legal prosecution.

Registration of the person concerned by stating personal data by his/her own choice is necessary for the controller to offer to the person concerned contents or services which, as a matter of course, can be offered only to registered users. Registered persons are free to change the personal data they have stated when registering at any time or to have them erased from the controller’s data file.

Upon request of any person concerned, the controller provides information, at any time, about the personal data which have been stored of the person concerned. Furthermore, the controller changes or erases personal data upon request or if indicated to do so by the person concerned, but for any legal obligations to retain the data. In this regard, all the controller’s employees are available as contact persons for the person concerned under info@cilentano.de.

The data we have received from you are collected, processed and used in order to enable you to use the web offer (usage data) and insofar as is required for entering, performing or terminating the contract (fulfillment of contract) and for customer service. These data are not passed on to third parties without your explicit consent. All the personal data are stored only as long as is necessary for the purpose mentioned (dealing with your inquiry or completing your request) and for the fulfillment of the contract. We erase these data as soon as storage is no longer required, or restrict the processing in case of legal obligations to retain the data. Storage time of personal data is based on the respective statutory retention period. After expiry of this period it is a standard procedure to erase the appropriate data, if they are no longer required for the fulfillment or the preparation of a contract.

By sending a message to info@cilentano.de you can object to the use or processing of your data for the purposes of promotion, market or opinion research.

For actions/operations taking place should we need to resort to appointed service providers for individual functions of our offer or want to use your data for promotional purposes see the information as of § 6 below. The criteria used to determine the period for which the data will be stored are also mentioned.

Should there be no legal basis for the processing of your personal data, we will ask for consent of the person concerned.

§ 3 Your rights as a user

Right of withdrawal: Pursuant to Art. 7 Abs. 3 DSGVO (GDPR) you have

– the right to withdraw the consent you have given to us at any time. As a consequence, we are not allowed to continue the processing of the data, which is based on this consent.

Right to information / further rights: Pursuant to Art. 15 DSGVO you have

– the right to obtain information about the personal data we process and the purposes of the processing, the category of the personal data, the recipients or categories of recipients these data are shared or will be shared with, the envisaged period for which the data will be stored,

– the right to rectification or erasure (“right to be forgotten”)

– the right to restriction of processing,

– the right to object to processing,

– the right to transfer data (data portability)

– the right to information about the source of your data, if they were not collected by us,

– the right to information about the existence of automated decision-making, including profiling and, where applicable, significant information about the details.

Right to rectification of inaccurate data: Pursuant to Art. 16 DSGVO you have

– the right to obtain immediate rectification of any inaccuracy in your personal data we have stored and to have incomplete personal data completed.

Right to erasure: Pursuant to Art. 17 DSGVO you have

– the right to erasure of your personal data we have stored, unless processing of the data is necessary for exercising the right of freedom of expression and information, for the performance of a legal obligation, for reasons of public interest or in order to establish, exercise or defend legal claims.

Right to obtain restriction: Pursuant to Art. 18 DSGVO you have

– the right to obtain restriction of the processing of your personal data, if you contest the accuracy of the data, if the processing is unlawful, you however oppose the erasure of the data, and if we no longer need them, you however need them to establish, exercise or defend legal claims, or if you have objected to processing pursuant to Art. 21 DSGVO.

Right to receive personal data: Pursuant to Art. 20 DSGVO you have

– the right to receive your personal data, which you have provided us with, in a structured, commonly used and machine readable format or to transmit them to another controller.

Right to lodge a complaint: Pursuant to Art. 77 DSGVO you have

– the right to lodge a complaint with a data protection authority about our processing of your personal data. In general, you can complain to the supervisory authority at your habitual place of residence or employment or to the one at the seat of our agency.

Right to object:

Should your personal data be processed on the basis of legitimate interests as defined by Art. 6 Abs. 1 S. 1 lit. f DSGVO, you have got the right pursuant to Art. 21 DSGVO to object, on grounds relating to your particular situation, to the processing of your personal data. – You can exercise your right of withdrawal by contacting us at info@cilentano.de or the address mentioned below. We then no longer process the personal data, unless it is verified that for processing there are essential reasons warranting protection and outweighing the interests, rights and liberties of the person concerned or unless processing serves to establish, exercise or defend legal claims.

Right to withdraw consent:

You have the right to withdraw the consent, along the lines of data privacy, which you have given concerning the processing of your personal data at any time with immediate effect. You also have the right to object to the processing of your data for promotional purposes and for market research. In these cases contact us under info@cilentano.de.

As to exercising the rights mentioned as well as information, requests or suggestions concerning data protection feel free to contact us under the address mentioned above or info@cilentano.de.

§ 4 Transfer of data to third parties

Your personal data are disclosed to third parties only for the following, specified purposes.

We disclose your personal data to a third party, if:

– you have given explicit consent pursuant to Art. 6 Abs. 1 S. 1 lit. a DSGVO,

– disclosure is required, pursuant to Art. 6 Abs. 1 S. 1 lit. f DSGVO, to establish, exercise or defend legal claims and if there is no reason to assume that your interests in not having your data transferred are legitimate and warrant protection,

– disclosure is necessary, pursuant to Art. 6 Abs. 1 S. 1 lit. c DSGVO, for compliance with a legal obligation, and

– disclosure is lawful and, pursuant to Art. 6 Abs. 1 S. 1 lit. b DSGVO, required for the performance of contracts to which you are a party.

§ 5 Use of cookies

Apart from the collection of the above-mentioned data, information in the form of cookies passes to your web browser and is stored on your computer when you visit our website. Cookies make it easier for you to use the website, because we recognize your computer when you visit again and reentry of your data becomes easier. Cookies are small text files with configuration information, which are assigned to the browser you use and stored on your hard disk and via which the website the cookie has been ‘sent’ from (in this case from us) is provided with certain information.

The cookies we use help to assess the frequency of use and the number of users of our website and to offer you the complete use of the service. Cookies cannot run programs or infect your computer with viruses. They serve to make Internet offers in general more user-friendly and more efficient.

This website uses transient cookies and persistent cookies.

Transient cookies are automatically deleted once you close the browser. Transient cookies include session cookies, for example. They store a so-called session ID, with which related browser requests are assigned to one session. This way, our website can identify your computer when you return to our website. Session cookies are deleted once you log out or close the browser.

Persistent cookies are automatically deleted after a specific length of time, which might differ depending on the cookie. You can delete cookies at any time in the security settings of your browser.

The data processed with the help of cookies are necessary for the purposes mentioned in order to ensure our legitimate interests as well as those of third parties, pursuant to Art. 6 Abs. 1 S. 1 lit. f DSGVO.

Most browsers are set in such a way that they accept cookies automatically. You can, however, deactivate the storing of cookies or set your browser to inform you as soon as cookies are sent or to delete them automatically. Moreover, you can delete the stored cookies from your hard disk later at any time.

Please note that the display of the website and the user guide might be ‘limited’ when cookies are deleted. This limited use of our services is, in general, possible without cookies, too.

§ 6 Tracking tools

We use the following tracking measures, which is done on the basis Art. 6 Abs. 1 S. 1 lit. f DSGVO. By using the tracking measures we want to ensure a needs-based presentation and continuous improvement of our website. Furthermore, tracking measures are used to analyze the use of our website from a statistical point of view and to evaluate them with regard to improving our offer for you. These interests are legitimate as defined by the regulation mentioned.

For the respective purposes of data processing and data categories refer to the corresponding tracking tools.

a) Google Analytics

For the purpose of a needs-based presentation and continuous improvement of our website we use Google Analytics, a web analytics service offered by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“). We use this service in the form of commissioned data processing.

Google Analytics uses cookies, too, i.e. text files which are stored on your computer and by which your use of the website can be analyzed (see above § 3). The information generated by the cookie regarding your use of this website, e.g.

– browser type/version,

– operating system used,

– referrer-URL (the site visited before),

– host name of the inquiring browser (IP address),

– time of the server inquiry,

is transmitted to a Google server in the USA and stored there.

As our website uses the anonymization feature of Google Analytics, Google first ‘strips’ your IP address within the area of the European Union and the European Economic Area; only in exceptional cases is the full IP address transferred to the Google server in the USA and ‘stripped’ there.

Google processes this information on our behalf to evaluate your use of the website, to file reports on the website activities for the website owner and to provide other services for us which are related to the use of the website and the Internet. This information might be transmitted to a third party, if there is a legal obligation to do so or if a third party is commissioned to process these data.

Google will in no case link your IP address transmitted by Google Analytics to other Google data. IP addresses are anonymized, thus making it impossible to identify any person concerned (IP masking).

You can prevent the cookies from being installed or stored by selecting the appropriate setting of your browser software (see § 3); we ask you to note that you might then not be able to use all the functions of this website to their full extent.

Furthermore, collection of the data generated by the cookie and related to your use of the website (including your IP address) as well as processing of these data by Google can be prevented by downloading and installing a browser add-on:

https://tools.google.com/dlpage/gaoptout?hl=de

You can object to the collection and processing of data with the help of Google Analytics at any time and with immediate effect for the future. In this case you can use the plug-in offered by Google:

https://tools.google.com/dlpage/gaoptout?hl=de

This website uses Google Analytics with its additional feature „_anonymizeIp ()“. IP addresses are ‘stripped’ before being processed, thus they cannot be linked to any person concerned.

The use of Google Analytics complies with the requirements which the German data protection authorities and Google have agreed upon. Further information regarding data protection in connection with the use of Google Analytics is provided, for example, by Google Analytics help:

https://support.google.com/analytics/answer/6004245?hl=de

We use Google Analytics including the functions of Universal Analytics. Universal Analytics enables us to analyze activities on our sites and integrate data across multiple devices (e.g. access via laptop and later via tablet). This is realized by assigning, in pseudomized form, a user ID to a user. Such an ID is assigned, for example, when you register for a customer account or log into your customer account. However, no personal data are transmitted to Google. The additional functions of Universal Analytics together with Google Analytics in no way restrict data protection measures, such as IP masking or browser add-on.

b) Google AdWords (including AdWords Conversion and Dynamic Remarketing)

This website uses services of Google AdWords (Google AdWords Conversion und Google AdWords Dynamic Remarketing) to create pseudomized user profiles for advertising and market research purposes. Should you have been ‘sent’ to our site via a Google ad, Google AdWords stores a cookie (see § 5) on your computer. The data transmitted from your browser (e.g. information about the browser used or the search history as well as data from cookies) are collected and processed by Google in the form of pseudomized user profiles.

A tracking cookie is used for Google AdWords Conversion, if a user clicks an ad run by Google. These cookies expire after 30 days and do not serve to identify any person concerned. Should the user visit certain pages on the website of the AdWords client (Cilentano) and should the cookie have not yet expired, Google and the client are able to tell that the user has clicked on the ad and has been referred to this site. Each client is assigned an individual cookie, i.e. cookies cannot be tracked via the websites of AdWords clients.

The information collected with the help of the cookie serves to compile conversion statistics for AdWords clients. As a result, we get to know about the total number of users which have clicked an ad and have been referred to a site with a conversion tracking tag. We do not, however, receive any information which would enable us to identify the user. There is no way to connect your personal data to your usage data.

By means of Google’s dynamic remarketing technology those users which have been to our website and have shown interest in our offer are approached again by specific advertisement on the sites of the Google partner network. The impression (display of the ad) is generated with the help of cookies. Text files help analyze a user’s behavior while on the website, which can then be used for personalized product recommendations and interest-based advertising.

Further information regarding data protection in connection with the use of Google AdWords is found at: https://www.google.de/policies/technologies/ads/.

If you do not want to be included in the tracking measure, you can object to a required cookie being placed – for example by selecting the browser setting which completely deactivates the automatic placing of cookies. You can deactivate cookies for conversion tracking by setting your browser to block cookies from the following domain: „googleadservices.com”. You can object to the collection and processing of data in connection with Google AdWords by changing your Google ad settings at www.google.com/settings/ads. Alternatively, you can turn to the opt-out page of the Network Advertising Initiative (https://www.networkadvertising.org/managing/opt_out.asp) and select an opt-out cookie, which cuts off processing by Google AdWords.

Google’s data privacy statement concerning conversion tracking is found at:

https://services.google.com/sitestats/de.html

c) DoubleClick

Doubleclick by Google is a service offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). DoubleClick by Google uses cookies to provide you with ads considered relevant for you. A pseudomized identification number (ID) is assigned to your browser to check on the ads which have been displayed on your browser and which ads have been called upon. The cookies do not include any personal information. The use of DoubleClick cookies enables Google and its partner websites only to place ads on the basis of prior visits to our website or to other websites on the Internet. Google transfers the information generated by the cookies to a server in the USA and stores it there. Google transfers data to third parties only if required by legal regulations or in connection with commissioned data processing. In no case will Google link your data to other data Google has collected.

By using our websites you agree to the processing of the data collected about you by Google and to the above-described way the data are processed as well as to the purpose mentioned. You can prevent cookies from being stored by selecting the appropriate setting of your browser software; we ask you to note that you might then not be able to use all the functions of this website to their full extent. Furthermore, you can prevent Google from collecting and then processing the data generated by the cookies and relating to your use of the websites by following the link to

https://adssettings.google.com/u/0/authenticated?hl=en-GB

where you download the browser plug-in available at DoubleClick opt-out extension and install it. Alternatively, you can deactivate DoubleClick cookies on the page of the Digital Advertising Alliance by following the link:

https://optout.aboutads.info/?c=2#!/

§ 7 Social Media Plugins and tools

On the basis of Art. 6 Abs. 1 S. 1 lit. f DSGVO we use Social Plugins of the social networks Facebook, Twitter and Instagram on our website to make our agency more widely known. The underlying promotional purpose is to be regarded as a legitimate interest as defined by the DSGVO. Responsibility for complying with data protection regulations is to be taken by the respective provider. We integrate these plugins by way of the so-called purpose-click method in order to offer visitors to our website the highest possible protection.

a) Facebook Social Plugins

Social Plugins („Plugins“) of the social network facebook.com, which is offered by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), have been placed on our website. The Facebook plugins can be identified by one of the Facebook logos (white „f“ on blue tile / „Thumbs up“-sign) or are marked by the add “Facebook Social Plugin”.

If you access a page of our website which includes such a plugin, your browser establishes direct connection with the servers of Facebook. The content of the plugin is transmitted by Facebook straight to your browser, which integrates it into the website. We, therefore, have no influence on the amount and content of the data Facebook collects with the help of these plugins, but pass on to you the information available to us (for the information Facebook offers go to https://www.facebook.com/help/186325668085084).

By placing the plugins, Facebook gets to know about your / your browser’s access of the corresponding page of our website. Should you then be logged in at Facebook, Facebook can link your visit to your Facebook account. Should you interact with the plugins, e.g. click the ‘like’ or ‘share’ button or make a comment, the corresponding information is transmitted from your browser to Facebook and stored there. Furthermore, the information is released on Facebook and accessible for your Facebook friends.

Even if you are not a Facebook member, Facebook might find out your IP address and store it.

Facebook can use this information for purposes of advertisement, market research and tailoring its websites to the needs of the market. Facebook creates usage, interest and relationship profiles, for example to evaluate your use of our website with regard to the ads you are shown on Facebook, to inform other Facebook users about your activities on our website and to provide other services linked to the use of Facebook.

If you are Facebook member, but do not want Facebook to collect data about you via our website and link them with the membership data stored with Facebook or to your Facebook account, log out of Facebook and delete cookies that have been placed before visiting our website (see above § 5).

For the purpose and extent concerning the collection of data and the further processing and use of the data by Facebook as well as for your respective rights and setting options regarding the protection of your privacy see Facebook’s privacy policy at https://de-de.facebook.com/about/privacy.

b) Twitter Plugins

Social Plugins („Plugins“) of the social network of Twitter, which is offered by Twitter Inc. at 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, have been placed on our website. The Twitter plugin can be identified by the symbol of the bird and the wording „Tweet“. See the survey:

https://about.twitter.com/resources/buttons.

If you access a page of our website which includes such a plugin, your browser establishes direct connection with the servers of Twitter. Twitter then receives the information that you have visited our website with your IP address. Should you be logged in at Twitter at that time by clicking / using one of the plugins („Tweet Button“), Twitter can link the visit to your account. If you interact with the plugins, e.g. by clicking a „tweet“ button, the corresponding information is transmitted from your browser to Twitter and stored there. Even if you are not a member of Twitter or have logged out of Twitter before visiting our website, Twitter might still find out your IP address and store it. We, the owners of this website, ask you to note that we receive no information about the contents of the transmitted data or their processing by Twitter.

For the purpose and extent concerning the collection of data and the further processing and use of the data by Twitter as well as for your respective rights and setting options regarding the protection of your privacy see Twitter’s privacy policy at https://twitter.com/privacy.

The plug-in provider stores your given data as user profiles and uses these for purposes of advertisement, market research and /or tailoring his website to the needs of the market. You have the right to object to these user profiles being generated and in order to exercise this right you have to turn to the plug-in provider.

If you are a Twitter member, but do not want Twitter to collect data about you via our website and link them to your data stored with Twitter, you have to log out of Twitter and delete cookies that have been placed before visiting our website. More information about cookies is found in this data privacy statement (see above § 5 and https://twitter.com/privacy)

c) Pinterest („Pin-it-button“)

We use the social network Pinterest of Pinterest Inc., 808 Brannan St., San Francisco, CA 94103, USA (henceforth called „Pinterest“). By your clicking the „Pin-it“ button Pinterest receives the information that you have accessed the corresponding page of our website. If you are logged in at Pinterest, Pinterest can link your visit to your Pinterest account. Pinterest stores the data transferred by clicking the „Pin-it“ button in the USA. If you do not agree with this, you have to log out of your Pinterest account before clicking the „Pin-it“ button.

For the purpose and extent concerning the collection of data and the further processing and use of the data by Pinterest as well as for your respective rights and rights of modification regarding the protection of your privacy see Pinterest’s privacy policy at https://pinterest.com/about/privacy/.

d) Instagram plug-in

Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the highest possible visibility on social media. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information on this subject, please consult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.

e) Font Awesome

Concerning uniform representation of fonts, this site uses so-called web fonts supplied by Fonticons Inc. When visiting a site, your browser stores the necessary web fonts in your browser cache in order to represent text and type of font correctly.
For this purpose, the browser you use has to link with the servers of Fonticons Inc. This way Fonticons Inc. gets to know that your IP-address has visited our website. Our use of web fonts serves to guarantee a uniform and attractive representation of our online offer. This is a legitimate interest according to Art. 6 Abs. 1 S. 1 lit. f DSGVO.
Should your browser not support web fonts, your computer will use a standard font.
Further information about Font Awesome is found at fontawesome.com/help and in the data privacy statement of Fonticons, Inc.: fontawesome.com/privacy.

§ 8 Trustpilot

As customer reviews are very efficient concerning transparency and improvement, we offer you the possibility to post a review concerning our service via a reviews service offered by Trustpilot www.trustpilot.de. We use an interface with the independent review site Trustpilot, which is run by Trustpilot A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark. We have no means at all to pick out individual review invitations or to influence them. This is the only way to make sure customer reviews of our enterprise and our services are complete, independent and not influenced. The data (name, first name, e-mail address and reference number) for this, which have been passed on to the business-app, are transferred to our business-app by Trustpilot and neither used by Trustpilot nor passed on to a third party. A review of our agency can be posted on https://de.trustpilot.com/review/. You are free to decide whether you want to post a review or not. In order to post a review or for a customer feedback to be recorded you have to open a user profile with Trustpilot. Apart from the review of the enterprise which invites you, reviews of any other enterprise can then be posted on the review site of Trustpilot. Should you not have been invited to post a review, you have to furnish clear proof of a contractual relationship with the enterprise to be reviewed. Further information in this respect is provided by Trustpilot. If you click the link in the invitation to leave a review, a user profile is automatically set up at Trustpilot after you have put down your personal data, in general name and e-mail address for verification. This involves acceptance of Trustpilot’s data privacy policy as well as general terms and conditions. They can be viewed on Turstpilot’s website de.legal.trustpilot.com/end-user-privacy-terms. If you participate in this feedback system, your review will be posted on our site as well as the sites of Trustpilot. For further details view the privacy policy as well as general terms and conditions of Trustpilot.

Should you not agree, you need only send us an e-mail.

§ 9 Newsletter / Newsletter subscription

Cilentano informs its customers and business partners about the agency’s offers by newsletter at regular intervals. Users have got the possibility to sign up for the newsletter. If you register for our newsletter by using the sign-up mask, the personal data (name, address, e-mail address) you have put down when registering are transmitted to the controller and stored. A person concerned can receive our newsletter only (1) if the person concerned has got a valid e-mail address and (2) if the person concerned signs up for the newsletter. For legal reasons and using the double opt-in process, a confirmation e-mail is sent to the e-mail address a concerned person has for the first time submitted in the subscription form. The confirmation e-mail serves to confirm whether the owner of the e-mail address is the person concerned and has authorized the sign-up for the newsletter. Cilentano can pass on the personal data to a processor, e.g. a lettershop, where they are also dealt with only internally and on behalf of the controller. Your data are not passed on to unauthorized third parties. When someone subscribes for our newsletter, we also store the IP address assigned by the Internet service provider (ISP) to the computer system the person concerned uses at the time of registration as well as the date and time of registration. Collecting these data is necessary in order to be able to retrace the (possible) abuse of the e-mail address of a person concerned later on and is therefore required to ensure legal protection of the controller.

The personal data collected when someone signs up for the newsletter are used only for mailing our newsletters. Furthermore, newsletter subscribers can be informed by e-mail, if this is required for the operation of the newsletter service or a related registration, which could be the case if changes occur regarding the newsletter offer or technical conditions.

A person concerned can cancel subscription to our newsletter at any time. The person concerned can withdraw consent to the storage of the personal data passed on for the newsletter sign up at any time. If you want to withdraw consent, you need only click the link which is included in each newsletter. You can also unsubscribe from the newsletter on the website of the controller or inform the controller in a different way. You can object to the use and processing of your data for the purposes of advertising, market or opinion research by sending a message to info@cilentano.de and you can unsubscribe from the newsletter at any time free of charge (at basic rates) by contacting info@cilentano.de.

Sendinblue

This website uses Sendinblue for the sending of newsletters. The provider is the Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Sendinblue services can, among other things, be used to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter are archived on Sendinblue’s servers in Germany.

Data analysis by Sendinblue

Sendinblue enables us to analyze our newsletter campaigns. For instance, it allows us to see whether a newsletter message has been opened and, if so, which links may have been clicked. This enables us to determine, which links drew an extraordinary number of clicks.

Sendinblue also enables us to divide the subscribers to our newsletter into various categories (i.e., to “cluster” recipients). For instance, newsletter recipients can be categorized based on age, gender, or place of residence. This enables us to tailor our newsletter more effectively to the needs of the respective target groups.

If you do not want to permit an analysis by Sendinblue, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter message. Moreover, you can also unsubscribe from the newsletter right on the website.

For detailed information on the functions of Sendinblue please follow this link: https://www.sendinblue.com/newsletter-software/.

10. Hosting

All-Inkl

Wir hosten unsere Website bei All-Inkl. Anbieter ist die ALL-INKL.COM - Neue Medien Münnich, Inh. René Münnich, Hauptstraße 68, 02742 Friedersdorf (nachfolgend All-Inkl). Details entnehmen Sie der Datenschutzerklärung von All-Inkl: https://all-inkl.com/datenschutzinformationen/.

Die Verwendung von All-Inkl erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Wir haben ein berechtigtes Interesse an einer möglichst zuverlässigen Darstellung unserer Website. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.

Auftragsverarbeitung

Wir haben einen Vertrag über Auftragsverarbeitung (AVV) mit dem oben genannten Anbieter geschlossen. Hierbei handelt es sich um einen datenschutzrechtlich vorgeschriebenen Vertrag, der gewährleistet, dass dieser die personenbezogenen Daten unserer Websitebesucher nur nach unseren Weisungen und unter Einhaltung der DSGVO verarbeitet.

11. Allgemeine Hinweise und Pflichtinformationen

Datenschutz

Die Betreiber dieser Seiten nehmen den Schutz Ihrer persönlichen Daten sehr ernst. Wir behandeln Ihre personenbezogenen Daten vertraulich und entsprechend den gesetzlichen Datenschutzvorschriften sowie dieser Datenschutzerklärung.

Wenn Sie diese Website benutzen, werden verschiedene personenbezogene Daten erhoben. Personenbezogene Daten sind Daten, mit denen Sie persönlich identifiziert werden können. Die vorliegende Datenschutzerklärung erläutert, welche Daten wir erheben und wofür wir sie nutzen. Sie erläutert auch, wie und zu welchem Zweck das geschieht.

Wir weisen darauf hin, dass die Datenübertragung im Internet (z. B. bei der Kommunikation per E-Mail) Sicherheitslücken aufweisen kann. Ein lückenloser Schutz der Daten vor dem Zugriff durch Dritte ist nicht möglich.

Hinweis zur verantwortlichen Stelle

Die verantwortliche Stelle für die Datenverarbeitung auf dieser Website ist:

Cilentano GmbH
Adlergasse 1
93047 Regensburg

Telefon: +49941 / 567646-0
E-Mail: info@cilentano.de

Verantwortliche Stelle ist die natürliche oder juristische Person, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personenbezogenen Daten (z. B. Namen, E-Mail-Adressen o. Ä.) entscheidet.

Speicherdauer

Soweit innerhalb dieser Datenschutzerklärung keine speziellere Speicherdauer genannt wurde, verbleiben Ihre personenbezogenen Daten bei uns, bis der Zweck für die Datenverarbeitung entfällt. Wenn Sie ein berechtigtes Löschersuchen geltend machen oder eine Einwilligung zur Datenverarbeitung widerrufen, werden Ihre Daten gelöscht, sofern wir keine anderen rechtlich zulässigen Gründe für die Speicherung Ihrer personenbezogenen Daten haben (z. B. steuer- oder handelsrechtliche Aufbewahrungsfristen); im letztgenannten Fall erfolgt die Löschung nach Fortfall dieser Gründe.

Allgemeine Hinweise zu den Rechtsgrundlagen der Datenverarbeitung auf dieser Website

Sofern Sie in die Datenverarbeitung eingewilligt haben, verarbeiten wir Ihre personenbezogenen Daten auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO bzw. Art. 9 Abs. 2 lit. a DSGVO, sofern besondere Datenkategorien nach Art. 9 Abs. 1 DSGVO verarbeitet werden. Im Falle einer ausdrücklichen Einwilligung in die Übertragung personenbezogener Daten in Drittstaaten erfolgt die Datenverarbeitung außerdem auf Grundlage von Art. 49 Abs. 1 lit. a DSGVO. Sofern Sie in die Speicherung von Cookies oder in den Zugriff auf Informationen in Ihr Endgerät (z. B. via Device-Fingerprinting) eingewilligt haben, erfolgt die Datenverarbeitung zusätzlich auf Grundlage von § 25 Abs. 1 TTDSG. Die Einwilligung ist jederzeit widerrufbar. Sind Ihre Daten zur Vertragserfüllung oder zur Durchführung vorvertraglicher Maßnahmen erforderlich, verarbeiten wir Ihre Daten auf Grundlage des Art. 6 Abs. 1 lit. b DSGVO. Des Weiteren verarbeiten wir Ihre Daten, sofern diese zur Erfüllung einer rechtlichen Verpflichtung erforderlich sind auf Grundlage von Art. 6 Abs. 1 lit. c DSGVO. Die Datenverarbeitung kann ferner auf Grundlage unseres berechtigten Interesses nach Art. 6 Abs. 1 lit. f DSGVO erfolgen. Über die jeweils im Einzelfall einschlägigen Rechtsgrundlagen wird in den folgenden Absätzen dieser Datenschutzerklärung informiert.

Hinweis zur Datenweitergabe in die USA und sonstige Drittstaaten

Wir verwenden unter anderem Tools von Unternehmen mit Sitz in den USA oder sonstigen datenschutzrechtlich nicht sicheren Drittstaaten. Wenn diese Tools aktiv sind, können Ihre personenbezogene Daten in diese Drittstaaten übertragen und dort verarbeitet werden. Wir weisen darauf hin, dass in diesen Ländern kein mit der EU vergleichbares Datenschutzniveau garantiert werden kann. Beispielsweise sind US-Unternehmen dazu verpflichtet, personenbezogene Daten an Sicherheitsbehörden herauszugeben, ohne dass Sie als Betroffener hiergegen gerichtlich vorgehen könnten. Es kann daher nicht ausgeschlossen werden, dass US-Behörden (z. B. Geheimdienste) Ihre auf US-Servern befindlichen Daten zu Überwachungszwecken verarbeiten, auswerten und dauerhaft speichern. Wir haben auf diese Verarbeitungstätigkeiten keinen Einfluss.

Widerruf Ihrer Einwilligung zur Datenverarbeitung

Viele Datenverarbeitungsvorgänge sind nur mit Ihrer ausdrücklichen Einwilligung möglich. Sie können eine bereits erteilte Einwilligung jederzeit widerrufen. Die Rechtmäßigkeit der bis zum Widerruf erfolgten Datenverarbeitung bleibt vom Widerruf unberührt.

Widerspruchsrecht gegen die Datenerhebung in besonderen Fällen sowie gegen Direktwerbung (Art. 21 DSGVO)

WENN DIE DATENVERARBEITUNG AUF GRUNDLAGE VON ART. 6 ABS. 1 LIT. E ODER F DSGVO ERFOLGT, HABEN SIE JEDERZEIT DAS RECHT, AUS GRÜNDEN, DIE SICH AUS IHRER BESONDEREN SITUATION ERGEBEN, GEGEN DIE VERARBEITUNG IHRER PERSONENBEZOGENEN DATEN WIDERSPRUCH EINZULEGEN; DIES GILT AUCH FÜR EIN AUF DIESE BESTIMMUNGEN GESTÜTZTES PROFILING. DIE JEWEILIGE RECHTSGRUNDLAGE, AUF DENEN EINE VERARBEITUNG BERUHT, ENTNEHMEN SIE DIESER DATENSCHUTZERKLÄRUNG. WENN SIE WIDERSPRUCH EINLEGEN, WERDEN WIR IHRE BETROFFENEN PERSONENBEZOGENEN DATEN NICHT MEHR VERARBEITEN, ES SEI DENN, WIR KÖNNEN ZWINGENDE SCHUTZWÜRDIGE GRÜNDE FÜR DIE VERARBEITUNG NACHWEISEN, DIE IHRE INTERESSEN, RECHTE UND FREIHEITEN ÜBERWIEGEN ODER DIE VERARBEITUNG DIENT DER GELTENDMACHUNG, AUSÜBUNG ODER VERTEIDIGUNG VON RECHTSANSPRÜCHEN (WIDERSPRUCH NACH ART. 21 ABS. 1 DSGVO).

WERDEN IHRE PERSONENBEZOGENEN DATEN VERARBEITET, UM DIREKTWERBUNG ZU BETREIBEN, SO HABEN SIE DAS RECHT, JEDERZEIT WIDERSPRUCH GEGEN DIE VERARBEITUNG SIE BETREFFENDER PERSONENBEZOGENER DATEN ZUM ZWECKE DERARTIGER WERBUNG EINZULEGEN; DIES GILT AUCH FÜR DAS PROFILING, SOWEIT ES MIT SOLCHER DIREKTWERBUNG IN VERBINDUNG STEHT. WENN SIE WIDERSPRECHEN, WERDEN IHRE PERSONENBEZOGENEN DATEN ANSCHLIESSEND NICHT MEHR ZUM ZWECKE DER DIREKTWERBUNG VERWENDET (WIDERSPRUCH NACH ART. 21 ABS. 2 DSGVO).

Beschwerderecht bei der zuständigen Aufsichtsbehörde

Im Falle von Verstößen gegen die DSGVO steht den Betroffenen ein Beschwerderecht bei einer Aufsichtsbehörde, insbesondere in dem Mitgliedstaat ihres gewöhnlichen Aufenthalts, ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes zu. Das Beschwerderecht besteht unbeschadet anderweitiger verwaltungsrechtlicher oder gerichtlicher Rechtsbehelfe.

Recht auf Datenübertragbarkeit

Sie haben das Recht, Daten, die wir auf Grundlage Ihrer Einwilligung oder in Erfüllung eines Vertrags automatisiert verarbeiten, an sich oder an einen Dritten in einem gängigen, maschinenlesbaren Format aushändigen zu lassen. Sofern Sie die direkte Übertragung der Daten an einen anderen Verantwortlichen verlangen, erfolgt dies nur, soweit es technisch machbar ist.

SSL- bzw. TLS-Verschlüsselung

Diese Seite nutzt aus Sicherheitsgründen und zum Schutz der Übertragung vertraulicher Inhalte, wie zum Beispiel Bestellungen oder Anfragen, die Sie an uns als Seitenbetreiber senden, eine SSL- bzw. TLS-Verschlüsselung. Eine verschlüsselte Verbindung erkennen Sie daran, dass die Adresszeile des Browsers von „http://“ auf „https://“ wechselt und an dem Schloss-Symbol in Ihrer Browserzeile.

Wenn die SSL- bzw. TLS-Verschlüsselung aktiviert ist, können die Daten, die Sie an uns übermitteln, nicht von Dritten mitgelesen werden.

Verschlüsselter Zahlungsverkehr auf dieser Website

Besteht nach dem Abschluss eines kostenpflichtigen Vertrags eine Verpflichtung, uns Ihre Zahlungsdaten (z. B. Kontonummer bei Einzugsermächtigung) zu übermitteln, werden diese Daten zur Zahlungsabwicklung benötigt.

Der Zahlungsverkehr über die gängigen Zahlungsmittel (Visa/MasterCard, Lastschriftverfahren) erfolgt ausschließlich über eine verschlüsselte SSL- bzw. TLS-Verbindung. Eine verschlüsselte Verbindung erkennen Sie daran, dass die Adresszeile des Browsers von „http://“ auf „https://“ wechselt und an dem Schloss-Symbol in Ihrer Browserzeile.

Bei verschlüsselter Kommunikation können Ihre Zahlungsdaten, die Sie an uns übermitteln, nicht von Dritten mitgelesen werden.

Auskunft, Löschung und Berichtigung

Sie haben im Rahmen der geltenden gesetzlichen Bestimmungen jederzeit das Recht auf unentgeltliche Auskunft über Ihre gespeicherten personenbezogenen Daten, deren Herkunft und Empfänger und den Zweck der Datenverarbeitung und ggf. ein Recht auf Berichtigung oder Löschung dieser Daten. Hierzu sowie zu weiteren Fragen zum Thema personenbezogene Daten können Sie sich jederzeit an uns wenden.

Recht auf Einschränkung der Verarbeitung

Sie haben das Recht, die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen. Hierzu können Sie sich jederzeit an uns wenden. Das Recht auf Einschränkung der Verarbeitung besteht in folgenden Fällen:

Wenn Sie die Richtigkeit Ihrer bei uns gespeicherten personenbezogenen Daten bestreiten, benötigen wir in der Regel Zeit, um dies zu überprüfen. Für die Dauer der Prüfung haben Sie das Recht, die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.
Wenn die Verarbeitung Ihrer personenbezogenen Daten unrechtmäßig geschah/geschieht, können Sie statt der Löschung die Einschränkung der Datenverarbeitung verlangen.
Wenn wir Ihre personenbezogenen Daten nicht mehr benötigen, Sie sie jedoch zur Ausübung, Verteidigung oder Geltendmachung von Rechtsansprüchen benötigen, haben Sie das Recht, statt der Löschung die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.
Wenn Sie einen Widerspruch nach Art. 21 Abs. 1 DSGVO eingelegt haben, muss eine Abwägung zwischen Ihren und unseren Interessen vorgenommen werden. Solange noch nicht feststeht, wessen Interessen überwiegen, haben Sie das Recht, die Einschränkung der Verarbeitung Ihrer personenbezogenen Daten zu verlangen.

Wenn Sie die Verarbeitung Ihrer personenbezogenen Daten eingeschränkt haben, dürfen diese Daten – von ihrer Speicherung abgesehen – nur mit Ihrer Einwilligung oder zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen oder zum Schutz der Rechte einer anderen natürlichen oder juristischen Person oder aus Gründen eines wichtigen öffentlichen Interesses der Europäischen Union oder eines Mitgliedstaats verarbeitet werden.

12. Datenerfassung auf dieser Website

Cookies

Unsere Internetseiten verwenden so genannte „Cookies“. Cookies sind kleine Textdateien und richten auf Ihrem Endgerät keinen Schaden an. Sie werden entweder vorübergehend für die Dauer einer Sitzung (Session-Cookies) oder dauerhaft (permanente Cookies) auf Ihrem Endgerät gespeichert. Session-Cookies werden nach Ende Ihres Besuchs automatisch gelöscht. Permanente Cookies bleiben auf Ihrem Endgerät gespeichert, bis Sie diese selbst löschen oder eine automatische Löschung durch Ihren Webbrowser erfolgt.

Teilweise können auch Cookies von Drittunternehmen auf Ihrem Endgerät gespeichert werden, wenn Sie unsere Seite betreten (Third-Party-Cookies). Diese ermöglichen uns oder Ihnen die Nutzung bestimmter Dienstleistungen des Drittunternehmens (z. B. Cookies zur Abwicklung von Zahlungsdienstleistungen).

Cookies haben verschiedene Funktionen. Zahlreiche Cookies sind technisch notwendig, da bestimmte Websitefunktionen ohne diese nicht funktionieren würden (z. B. die Warenkorbfunktion oder die Anzeige von Videos). Andere Cookies dienen dazu, das Nutzerverhalten auszuwerten oder Werbung anzuzeigen.

Cookies, die zur Durchführung des elektronischen Kommunikationsvorgangs, zur Bereitstellung bestimmter, von Ihnen erwünschter Funktionen (z. B. für die Warenkorbfunktion) oder zur Optimierung der Website (z. B. Cookies zur Messung des Webpublikums) erforderlich sind (notwendige Cookies), werden auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO gespeichert, sofern keine andere Rechtsgrundlage angegeben wird. Der Websitebetreiber hat ein berechtigtes Interesse an der Speicherung von notwendigen Cookies zur technisch fehlerfreien und optimierten Bereitstellung seiner Dienste. Sofern eine Einwilligung zur Speicherung von Cookies und vergleichbaren Wiedererkennungstechnologien abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage dieser Einwilligung (Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG); die Einwilligung ist jederzeit widerrufbar.

Sie können Ihren Browser so einstellen, dass Sie über das Setzen von Cookies informiert werden und Cookies nur im Einzelfall erlauben, die Annahme von Cookies für bestimmte Fälle oder generell ausschließen sowie das automatische Löschen der Cookies beim Schließen des Browsers aktivieren. Bei der Deaktivierung von Cookies kann die Funktionalität dieser Website eingeschränkt sein.

Soweit Cookies von Drittunternehmen oder zu Analysezwecken eingesetzt werden, werden wir Sie hierüber im Rahmen dieser Datenschutzerklärung gesondert informieren und ggf. eine Einwilligung abfragen.

Einwilligung mit Borlabs Cookie

Unsere Website nutzt die Consent-Technologie von Borlabs Cookie, um Ihre Einwilligung zur Speicherung bestimmter Cookies in Ihrem Browser oder zum Einsatz bestimmter Technologien einzuholen und diese datenschutzkonform zu dokumentieren. Anbieter dieser Technologie ist Borlabs - Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (im Folgenden Borlabs).

Wenn Sie unsere Website betreten, wird ein Borlabs-Cookie in Ihrem Browser gespeichert, in dem die von Ihnen erteilten Einwilligungen oder der Widerruf dieser Einwilligungen gespeichert werden. Diese Daten werden nicht an den Anbieter von Borlabs Cookie weitergegeben.

Die erfassten Daten werden gespeichert, bis Sie uns zur Löschung auffordern bzw. das Borlabs-Cookie selbst löschen oder der Zweck für die Datenspeicherung entfällt. Zwingende gesetzliche Aufbewahrungsfristen bleiben unberührt. Details zur Datenverarbeitung von Borlabs Cookie finden Sie unter https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Der Einsatz der Borlabs-Cookie-Consent-Technologie erfolgt, um die gesetzlich vorgeschriebenen Einwilligungen für den Einsatz von Cookies einzuholen. Rechtsgrundlage hierfür ist Art. 6 Abs. 1 lit. c DSGVO.

Server-Log-Dateien

Der Provider der Seiten erhebt und speichert automatisch Informationen in so genannten Server-Log-Dateien, die Ihr Browser automatisch an uns übermittelt. Dies sind:

Browsertyp und Browserversion
verwendetes Betriebssystem
Referrer URL
Hostname des zugreifenden Rechners
Uhrzeit der Serveranfrage
IP-Adresse

Eine Zusammenführung dieser Daten mit anderen Datenquellen wird nicht vorgenommen.

Die Erfassung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an der technisch fehlerfreien Darstellung und der Optimierung seiner Website – hierzu müssen die Server-Log-Files erfasst werden.

Anfrage per E-Mail, Telefon oder Telefax

Wenn Sie uns per E-Mail, Telefon oder Telefax kontaktieren, wird Ihre Anfrage inklusive aller daraus hervorgehenden personenbezogenen Daten (Name, Anfrage) zum Zwecke der Bearbeitung Ihres Anliegens bei uns gespeichert und verarbeitet. Diese Daten geben wir nicht ohne Ihre Einwilligung weiter.

Die Verarbeitung dieser Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO, sofern Ihre Anfrage mit der Erfüllung eines Vertrags zusammenhängt oder zur Durchführung vorvertraglicher Maßnahmen erforderlich ist. In allen übrigen Fällen beruht die Verarbeitung auf unserem berechtigten Interesse an der effektiven Bearbeitung der an uns gerichteten Anfragen (Art. 6 Abs. 1 lit. f DSGVO) oder auf Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO) sofern diese abgefragt wurde; die Einwilligung ist jederzeit widerrufbar.

Die von Ihnen an uns per Kontaktanfragen übersandten Daten verbleiben bei uns, bis Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt (z. B. nach abgeschlossener Bearbeitung Ihres Anliegens). Zwingende gesetzliche Bestimmungen – insbesondere gesetzliche Aufbewahrungsfristen – bleiben unberührt.

Registrierung auf dieser Website

Sie können sich auf dieser Website registrieren, um zusätzliche Funktionen auf der Seite zu nutzen. Die dazu eingegebenen Daten verwenden wir nur zum Zwecke der Nutzung des jeweiligen Angebotes oder Dienstes, für den Sie sich registriert haben. Die bei der Registrierung abgefragten Pflichtangaben müssen vollständig angegeben werden. Anderenfalls werden wir die Registrierung ablehnen.

Für wichtige Änderungen etwa beim Angebotsumfang oder bei technisch notwendigen Änderungen nutzen wir die bei der Registrierung angegebene E-Mail-Adresse, um Sie auf diesem Wege zu informieren.

Die Verarbeitung der bei der Registrierung eingegebenen Daten erfolgt zum Zwecke der Durchführung des durch die Registrierung begründeten Nutzungsverhältnisses und ggf. zur Anbahnung weiterer Verträge (Art. 6 Abs. 1 lit. b DSGVO).

Die bei der Registrierung erfassten Daten werden von uns gespeichert, solange Sie auf dieser Website registriert sind und werden anschließend gelöscht. Gesetzliche Aufbewahrungsfristen bleiben unberührt.

13. Analyse-Tools und Werbung

Browser Plugin

Sie können die Erfassung und Verarbeitung Ihrer Daten durch Google verhindern, indem Sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren: https://tools.google.com/dlpage/gaoptout?hl=de.

Mehr Informationen zum Umgang mit Nutzerdaten bei Google Analytics finden Sie in der Datenschutzerklärung von Google: https://support.google.com/analytics/answer/6004245?hl=de.

Auftragsverarbeitung

Wir haben mit Google einen Vertrag zur Auftragsverarbeitung abgeschlossen und setzen die strengen Vorgaben der deutschen Datenschutzbehörden bei der Nutzung von Google Analytics vollständig um.

Google Conversion-Tracking

Diese Website nutzt Google Conversion Tracking. Anbieter ist die Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.

Mit Hilfe von Google-Conversion-Tracking können Google und wir erkennen, ob der Nutzer bestimmte Aktionen durchgeführt hat. So können wir beispielsweise auswerten, welche Buttons auf unserer Website wie häufig geklickt und welche Produkte besonders häufig angesehen oder gekauft wurden. Diese Informationen dienen dazu, Conversion-Statistiken zu erstellen. Wir erfahren die Gesamtanzahl der Nutzer, die auf unsere Anzeigen geklickt haben und welche Aktionen sie durchgeführt haben. Wir erhalten keine Informationen, mit denen wir den Nutzer persönlich identifizieren können. Google selbst nutzt zur Identifikation Cookies oder vergleichbare Wiedererkennungstechnologien.

Die Nutzung von Google Conversion-Tracking erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse an der Analyse des Nutzerverhaltens, um sowohl sein Webangebot als auch seine Werbung zu optimieren. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.

Mehr Informationen zu Google Conversion-Tracking finden Sie in den Datenschutzbestimmungen von Google: https://policies.google.com/privacy?hl=de.

13. Plugins und Tools

Google Maps

Diese Seite nutzt den Kartendienst Google Maps. Anbieter ist die Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.

Zur Nutzung der Funktionen von Google Maps ist es notwendig, Ihre IP-Adresse zu speichern. Diese Informationen werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Der Anbieter dieser Seite hat keinen Einfluss auf diese Datenübertragung. Wenn Google Maps aktiviert ist, kann Google zum Zwecke der einheitlichen Darstellung der Schriftarten Google Web Fonts verwenden. Beim Aufruf von Google Maps lädt Ihr Browser die benötigten Web Fonts in ihren Browsercache, um Texte und Schriftarten korrekt anzuzeigen.

Die Nutzung von Google Maps erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote und an einer leichten Auffindbarkeit der von uns auf der Website angegebenen Orte. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Abs. 1 lit. f DSGVO dar. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.

Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier: https://privacy.google.com/businesses/gdprcontrollerterms/ und https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

Mehr Informationen zum Umgang mit Nutzerdaten finden Sie in der Datenschutzerklärung von Google: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

Wir nutzen „Google reCAPTCHA“ (im Folgenden „reCAPTCHA“) auf dieser Website. Anbieter ist die Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.

Mit reCAPTCHA soll überprüft werden, ob die Dateneingabe auf dieser Website (z. B. in einem Kontaktformular) durch einen Menschen oder durch ein automatisiertes Programm erfolgt. Hierzu analysiert reCAPTCHA das Verhalten des Websitebesuchers anhand verschiedener Merkmale. Diese Analyse beginnt automatisch, sobald der Websitebesucher die Website betritt. Zur Analyse wertet reCAPTCHA verschiedene Informationen aus (z. B. IP-Adresse, Verweildauer des Websitebesuchers auf der Website oder vom Nutzer getätigte Mausbewegungen). Die bei der Analyse erfassten Daten werden an Google weitergeleitet.

Die reCAPTCHA-Analysen laufen vollständig im Hintergrund. Websitebesucher werden nicht darauf hingewiesen, dass eine Analyse stattfindet.

Die Speicherung und Analyse der Daten erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO. Der Websitebetreiber hat ein berechtigtes Interesse daran, seine Webangebote vor missbräuchlicher automatisierter Ausspähung und vor SPAM zu schützen. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Abs. 1 lit. a DSGVO und § 25 Abs. 1 TTDSG, soweit die Einwilligung die Speicherung von Cookies oder den Zugriff auf Informationen im Endgerät des Nutzers (z. B. Device-Fingerprinting) im Sinne des TTDSG umfasst. Die Einwilligung ist jederzeit widerrufbar.

Weitere Informationen zu Google reCAPTCHA entnehmen Sie den Google-Datenschutzbestimmungen und den Google Nutzungsbedingungen unter folgenden Links: https://policies.google.com/privacy?hl=de und https://policies.google.com/terms?hl=de.

14. eCommerce und Zahlungsanbieter

Zahlungsdienste

Wir binden Zahlungsdienste von Drittunternehmen auf unserer Website ein. Wenn Sie einen Kauf bei uns tätigen, werden Ihre Zahlungsdaten (z. B. Name, Zahlungssumme, Kontoverbindung, Kreditkartennummer) vom Zahlungsdienstleister zum Zwecke der Zahlungsabwicklung verarbeitet. Für diese Transaktionen gelten die jeweiligen Vertrags- und Datenschutzbestimmungen der jeweiligen Anbieter. Der Einsatz der Zahlungsdienstleister erfolgt auf Grundlage von Art. 6 Abs. 1 lit. b DSGVO (Vertragsabwicklung) sowie im Interesse eines möglichst reibungslosen, komfortablen und sicheren Zahlungsvorgangs (Art. 6 Abs. 1 lit. f DSGVO). Soweit für bestimmte Handlungen Ihre Einwilligung abgefragt wird, ist Art. 6 Abs. 1 lit. a DSGVO Rechtsgrundlage der Datenverarbeitung; Einwilligungen sind jederzeit für die Zukunft widerrufbar.

Folgende Zahlungsdienste / Zahlungsdienstleister setzen wir im Rahmen dieser Website ein:

PayPal

Anbieter dieses Zahlungsdienstes ist PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (im Folgenden „PayPal“).

Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt. Details finden Sie hier: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details entnehmen Sie der Datenschutzerklärung von PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.