Online shop

I. Scope of Application

With this document, the controller wishes to fulfil its obligations to provide information to data subjects in accordance with Art. 13 of the General Data Protection Regulation (GDPR). This Privacy Policy is published at https://www.vandebord.de/en/privacy-policy and has been valid since April 2021. Due to the further development of our internet presence or due to changed legal or official requirements, it may become necessary to change this Privacy Policy. The amended version will be announced here.

II. Who is responsible for data processing?

The data controller pursuant to Art. 4 No. 7 GDPR is:

VanDeBord GmbH, Robert-Bosch-Straße 1, 63755 Alzenau, Germany, Telephone: +49(0) 6023 92962-25, Fax: 06023 92962-27, e-mail: pilot@vandebord.com
The complete legal notice is available under the following link: https://www.vandebord.de/en/legal-notice

III. Is there a data protection officer?

The data controller has appointed the following company data protection officer:

Marc Oliver Giel, Lagerstraße 11 A, 64808 Dieburg, Germany, e-mail: giel@datamog.de

IV. For what purposes do we process your data?

IV.1. Log Files / Hosting

If you visit our website without registering or otherwise providing us with information, we only collect the following data that your browser transmits to our server (so-called “server log files”):

• The individual pages of our Internet presence (URL)
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (if applicable, in anonymised form)

Our internet presence is stored with a hosting provider and kept available for retrieval. The web server used stores the aforementioned server log files.

• Purpose of the processing: Hosting of the internet presence
• Legal basis and legitimate interests: The processing is carried out on the basis of our overriding legitimate interest (Art. 6 Para. 1 lit. f GDPR) in the security and stability of our internet presence by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.
• Data recipient: Timme Hosting GmbH & Co. KG, https://www.timmehosting.de/
• Storage period: 7 days

IV.2. Cookies

IV.2.a. General Information

(aa) Definitions

Below you will find comprehensive information about so-called “cookies”. This is information that is often stored in databases on your terminal device. The following terms are used below where applicable:

• First-party cookie: This cookie is stored or modified by the website you are currently browsing.
• Third-party cookie: This cookie is stored or modified by third parties with whom the website operator is associated (e.g. an advertising network, a social media platform, etc.).
• Session cookie: This cookie is deleted from your terminal device when you close the browser. Often, a session cookie stores only one session ID in order to associate multiple requests from a user on a page with that user's session.
• Persistent cookie: This cookie is stored on your terminal device until its validity expires or until you delete it manually or automatically in the browser.
• Technically necessary cookie: This cookie is technically necessary for the presentation of our website and enables the necessary functions contained on it.
• Technically unnecessary cookie: This cookie is not absolutely necessary for the display or use of the website, but enables us or you to use a special functionality.

Any type of cookie may contain personal data. In many cases, however, the data in the cookies are pseudonymised.

(bb) Legal basis

• Technically necessary cookies: The storage and modification of technically necessary cookies are based on the legal basis of our overriding legitimate interests according to Art. 6 Para. 1 lit. f GDPR. These are the optimal, browser and operating system-independent, technically secure external presentation and advertising of our company on the Internet as well as the user-friendly and effective design of your website visit.
• Technically unnecessary cookies: The storage and modification of technically unnecessary cookies are based on the legal basis of your individual personal and voluntary consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The data processing remains lawful until revocation. Please note that if you do not accept technically unnecessary cookies, individual functions of our website may be restricted.

(cc) Data recipient / Access options

• First-party cookies: Only we, as the data controller and site operator, have access to this.
• Third-party cookies: Only the third party who has set these cookies has access to them. For example, only Google has access to a cookie set by Google and can read or change it.

(dd) Storage period / Deletion options

• Session cookies: These only remain temporarily stored in your browser until the end of the browser session or can be deleted by you beforehand.
• Persistent cookies: These remain stored on your end device for as long as specified for the respective cookie or can be deleted by you beforehand.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

• Internet Explorer:  https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
• Firefox:  https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
• Chrome: https://support.google.com/chrome/answer/95647?hl=&hlrm=en
• Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
• Opera: https://help.opera.com/en/latest/web-preferences/

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the US site https://www.aboutads.info/choices or the EU site https://www.youronlinechoices.com/.

IV.2.b. Cookies used

In the following overview, we list the technically necessary first-party cookies used on our website and the purpose of the data processing:

In the following overview, we list the technically unnecessary first-party cookies used on our website and the purpose of the data processing:

In the following overview, we list the technically unnecessary third-party cookies used on our website and the purpose of the data processing:

In the following overview, we list the technically necessary local storage entries used on our website and the purpose of the data processing:

IV.3. Cookie Consent Management

Cookies and consent management

In addition to storing cookies (see separate section), we manage the consent forms of our internet users by means of a cookie consent tool.

• Purpose of the processing: Fulfilment of the legal obligation for consent management.
• Legal basis: Art. 6 Para. 1 Sent. 1 lit. c GDPR
• Storage period: Until the revocation of the consent to the storage of cookies, at the longest until the expiry of the respective cookie. The storage period of the respective cookies is listed in the cookie table.

Where mentioned below, we have commissioned the following service provider with consent management:

Usercentrics

This is a service of Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. https://usercentrics.com/

• Privacy policy of Usercentrics GmbH: https://usercentrics.com/privacy-policy/
• More information on data storage on the Consent Management Platform: https://usercentrics.com/knowledge-hub/it-compliance-faq/
• Storage duration at Usercentrics: 3 years

IV.4. Contacting

When you contact us (e.g. by contact form, e-mail, telephone, fax), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information we cannot process your request. All other information is voluntary.

• Purpose of the processing: Answering your request.
• Legal basis: Art. 6 Para. 1 lit. b GDPR for preliminary or contractual matters. Art. 6 Para. 1 lit. a GDPR for your voluntary information. Art. 6 Para. 1 lit. f GDPR for all other requests as well as the use of our technical service providers.
• Legitimate interests: The processing of your data using the service providers is based on our overriding legitimate interest in responding to your request in a secure, timely and professional manner.
• Recipient of the data: Hosting provider for contact form requests; emails: Host Europe GmbH, https://www.hosteurope.de/
• Storage period: Your data will be deleted after your request has been processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your request will be stored until the end of the contract and then restricted in processing. If there is no longer a legal reason to store the data, it will be deleted.

IV.5. Data collection when commenting

If you use the option to submit a comment on our website, we require the mandatory information from you that can be seen in the comment form on the basis of the user agreement concluded with you. We cannot publish your comment without your mandatory details.

• Purpose of the processing: Publication of your personal comment on our website.
• Legal basis: User agreement (Art. 6 Para. 1 lit. b GDPR)
• Storage period: We store the comment and your other unpublished data until the end of the agreement and then restrict the processing thereof. If there is no longer a legal reason to store the data, it will be deleted.

IV.6. Newsletter

We send newsletters by e-mail to registered users with information about our company, products, services, promotions and offers. The newsletter is sent out on a maximum monthly basis.

• Double opt-in procedure: Registration for our newsletter is always carried out using a so-called double opt-in procedure. You will receive an email after registration asking you to confirm your registration. This confirmation is necessary to verify the accuracy of your e-mail address. Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time as well as the IP address.
• Purpose of the processing: Direct marketing, customer communication.
• Legal basis: When subscribing to our newsletter, the subscriber gives the subscriber’s consent (Art. 6 Para. 1 Sent. 1 lit. a GDPR).
• Right of withdrawal / Opt-Out: You can cancel receipt of our newsletter at any time, i.e. withdraw your consent, by informing us by e-mail (see above under Controller) or by clicking on the link provided at the end of each newsletter. The revocation shall not affect the lawfulness of the processing that was carried out on the basis of the consent up until the revocation.
• Obligation to provide information: To send you the newsletter, we need at least your valid e-mail address. Otherwise, it will not be possible to send it.
• Storage period: Your data will be stored until you withdraw your consent. Afterwards, the data are restricted for processing purposes and stored for up to three years in order to be able to prove a formerly granted consent in a legally compliant manner. This is done on the basis of our legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f. GDPR) in the verifiability of data protection compliance.

If named below, we use the following service provider for this purpose:

Klaviyo

Klaviyo as our order processor uses personal data (mail address, time of retrieval, IP address, browser type and operating system) to send and statistically evaluate the newsletter on our behalf. This data allows an individual conclusion to be drawn about the newsletter recipient and is processed by Klaviyo for the automated creation of statistics that show whether a specific recipient has opened a newsletter message. For the evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of the web beacons, Klaviyo automatically creates general, non-personal statistics about the response behavior to newsletter campaigns.

• Data recipient: Klaviyo, Inc, 125 Summer St, Floor 6 Boston, MA 02111, USA, https://www.klaviyo.com/
• Klaviyo privacy policy: https://www.klaviyo.com/legal/privacy-notice
• Legal basis: Art. 28 DSGVO
• Third-country-transfer: Data processing is carried out in the USA.
• Appropriate safeguards for the transfer of data: We have entered into a Data Processing Agreement (DPA) with Klaviyo to protect your personal data. This also contains the EU standard contractual clauses from 2021, which are to be considered as appropriate safeguards according to Art. 46 (2) lit c) DSGVO. In order to comply with the requirements of the ECJ from its judgment (C-311/18), additional measures have been agreed with Klaviyo, which are also included in the above-mentioned DPA, to protect your personal data.

IV.7. Web analysis, Marketing

Google Analytics and Remarketing

Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Google). Google Analytics uses so-called “cookies”. This is information that is often stored in databases on your terminal device and which enables an analysis of your use of the website. The information generated by the cookie about the use of this website by users is generally transmitted to the parent company of Google in the USA and stored there.

Our website uses Google Analytics exclusively with the extension //«_anonymizeIp()»//, which ensures anonymisation of the IP address by truncating it and excluding direct personal reference. By extension, your IP address will be truncated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google's parent company in the USA and shortened there.

Our website uses the “demographic characteristics” function for this purpose. This allows reports to be created that contain statements about the age, gender and interests of the site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person.

Our website uses the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalised advertising messages that have been adapted to you on one end device (e.g. mobile phone), depending on your previous usage and surfing behaviour, can also be displayed on another of your end devices (e.g. tablet or PC). To support this feature, Google Analytics collects Google-authenticated IDs of users, which are temporarily linked to our Google Analytics data to define and create target groups for cross-device ad advertising.

• Purpose of the processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company.
• Legal basis: For the use of Google Analytics and Remarketing, you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with future effect by deselecting “Marketing” or “Google Analytics” in the cookie settings on our site.
• Storage period: We store the anonymised data determined in this way for a maximum period of 14 months. Afterwards, the data is deleted automatically. With regard to the storage period by Google, we refer you to their privacy policy.
• Objection / Opt-Out: You can object to the collection of your data by installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en
  You can also deactivate personalised advertising directly at Google: https://www.google.com/settings/ads/onweb/
  For more information from Google on how you can block certain ads, click here: https://support.google.com/ads/answer/2662922?hl=en
  You can also enter your preferences for online advertising here, regardless of the provider: https://www.youronlinechoices.com
  Alternatively, you can use the administration page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
• Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Privacy policy of Google: https://policies.google.com/privacy
• Data protection information from Google for Google Analytics: https://support.google.com/analytics/answer/6004245
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.

We have concluded the following Order Processing Agreement with Google:
https://privacy.google.com/businesses/processorterms/

Google Tag Manager

On our website we use the Google Tag Manager of the company Google. The Google Tag Manager is an online tool with which we can integrate and manage website tags centrally and via a user interface. Tags are small sections of code that, for example, record your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our website. The tags come from Google Ads or Google Analytics, for example, but tags from other companies can also be integrated and managed via the manager. Such tags take on different tasks. They can collect browser data, embed buttons, set cookies and also track users across multiple websites. In the Tag Manager account settings, we have allowed Google to receive anonymised data from us. However, this refers to only the use and usage of our Tag Manager and not your data stored via the code sections.

• Purpose of the processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company. As far as we are aware, Google also uses the data collected in this way (anonymised) for its own purposes. In this respect, we refer your to Google's privacy policy.
• Legal basis and legitimate interests: For the integration of the Google Tag Manager on our website, this processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. The use of the various tags then takes place in accordance with the sections described separately with the express consent of the user.
• Storage period: With regard to the storage period by Google, we refer you to their privacy policy.
• Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Privacy policy of Google: https://policies.google.com/privacy
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.
  
  

Google Optimize

We use “Google Optimize” of the company Google Ireland Ltd. (“Google”) on our website. We use this web analysis and optimisation service to increase the attractiveness, content and functionality of our internet presence by playing out new functions and content to a percentage of our users and statistically evaluating the change in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics).

Google Optimize uses cookies to optimise and analyse your use of our website. We only use Google Optimize with IP anonymisation activated, so that your IP address is truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and optimisation tests, and providing other services relating to website activity and internet usage.

• Purpose of the processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company.
• Legal basis: For the use of Google Optimize, you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting “Marketing” in the cookie settings on our site.
• Storage period: We store the anonymised data determined in this way for a maximum period of 14 months. Afterwards, the data is deleted automatically. With regard to the storage period by Google, we refer you to their privacy policy.
• Objection / Opt-Out: You can object to the collection of your data by installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en
  You can also deactivate personalised advertising directly at Google: https://www.google.com/settings/ads/onweb/
  For more information from Google on how you can block certain ads, click here: https://support.google.com/ads/answer/2662922?hl=en
  You can also enter your preferences for online advertising here, regardless of the provider: https://www.youronlinechoices.com
  Alternatively, you can use the administration page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
• Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Privacy policy of Google: https://policies.google.com/privacy
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.

We have concluded the following Order Processing Agreement with Google: https://privacy.google.com/businesses/processorterms/

IV.8. Conversion tracking, Remarketing

Bing Ads

We use the following tools on our website, which are provided and operated by Microsoft Corporation (“Microsoft”).

Bing Ads Conversion Tracking

This is a tool for measuring the reach of our advertisements. It determines how successful our advertising efforts are on Bing and Yahoo. In this way, we only display the advertisements that are of interest to the respective user. For this purpose, the UET Tag (Universal Event Tracking Tag) from Microsoft is integrated on our website. With the help of this JavaScript code, Microsoft is enabled to collect pseudonymised data about the user's visit and use of our Internet presence (e.g. about the browser session and the website displayed) via cookies and to provide us with aggregated, non-personal statistics on this basis (e.g. how many visitors have reached a certain target page).

Bing Ads Remarketing

This is a tool with which we can display relevant advertising to the user of our Internet presence after the visit to us, even if the user is already on other websites. In this way, we want to show the respective user advertisements that are of interest to said user. This is done via a cookie stored in the user's browser (see above), via which the usage behaviour is recorded and evaluated. No personal information is transmitted to us about individual website visitors, and website customer target groups can only be targeted by us in advertisements if the customer target group has reached a critical size in terms of numbers.

• Purpose of the processing: Marketing, remarketing, profiling with user-related information (creating user profiles)
• Legal basis: For the use of Bing Ads, you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with future effect by deselecting “Marketing” or “Bing Ads” in the cookie settings on our site.
• Storage period: With regard to the storage period by Microsoft, we refer you to their privacy policy.
• Objection / Opt-Out: If you do not want information about your behaviour to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this – for example, by means of a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of the data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by declaring your objection under the following link: https://account.microsoft.com/privacy/ad-settings/signedout
  Deactivating interest-based ads is also possible under: https://about.ads.microsoft.com/en-us/resources/policies/personalized-ads
• Data recipient: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
• Privacy policy of Microsoft:
  https://privacy.microsoft.com/en-us/privacystatement
• Third-country transfer: If non-anonymised data is transferred to Microsoft Corp., then data processing takes place in the USA.

Facebook Pixel

On our website, we use the Facebook Pixel function, a product of Facebook Ireland Ltd (“Facebook”). This enables Facebook to determine the visitors to our website as a target group for the display of advertisements (so-called “Facebook ads”). We use Facebook Pixel to display Facebook ads placed by us only to users on Facebook, and within the services of partners cooperating with Facebook (so-called “audience network” https://www.facebook.com/audiencenetwork/), who have also shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products that are evident from the websites visited) that we transmit to Facebook (so-called “custom audiences”). In addition, we also want to make sure that our Facebook ads match the potential interests of the users and do not bother the users. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion measurement”).

• Pursuant to Art. 4 No. 7, 26 GDPR, we are jointly responsible for the processing of the data for so-called “event dates” with: Facebook Ireland Ltd. (hereinafter referred to as “Facebook”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA
• Purpose of the processing: a) displaying content and advertising information that is relevant to users' perceived interests; b) delivering commercial and transactional messages (e.g. targeting users via Facebook Messenger); c) improving ad delivery and personalising features and content (e.g. improving the identification of which content or advertising information is likely to be relevant to users' interests).
• Legal basis: see Facebook's data policy at: https://www.facebook.com/policy
• Third-country transfer: Facebook Ireland, to our knowledge, transmits users' data to its parent company in the USA.
• Appropriate safeguards for the transfer of data: Facebook relies on the Commission's standard data protection clauses under Art. 46 Para. 2 c) GDPR for data transfers to the US, cf. https://www.facebook.com/help/566994660333381?ref=dp
• Storage period: see Facebook's data policy at: https://www.facebook.com/policy

The main contents of the Joint Responsibility Agreement pursuant to Art. 26 GDPR are available here: https://www.facebook.com/legal/controller_addendum

Google Ads (formerly AdWords)

Our website uses “Google Ads” of the company Google Ireland Ltd. (Google) in order to advertise our products with it. We use conversion tracking for this purpose on our website. This records which internet users clicked on our advertising on external websites and then came to our website. In addition, we can use it to record whether our advertisements have triggered certain actions on our website (e.g. ordering in the shop, subscribing to a newsletter, etc.). However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page marked with a so-called “conversion tracking tag”. However, we ourselves do not receive any information with which users can be identified. However, in the context of so-called conversion measurements, we can check which of our online marketing methods have led to a so-called conversion, i.e., for example, to a contract being concluded with us. The conversion measurement is used solely to analyse the success of our marketing measures.

• Shared responsibility: We are jointly responsible for the integration of Google AdSense along with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Purpose of the processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company.
• Legal basis: For the use of cookies for Google Ads and conversion tracking, you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting “Marketing” or “Google Ads” in the cookie settings on our site. Our overriding legitimate interest pursuant to Art. 6 Para. 1 Sent. 1 lit. f GDPR is to advertise our products and services.
• Storage period: With regard to the storage period by Google, we refer you to their privacy policy.
• Objection / Opt-Out: You can deactivate personalised advertising directly at Google: https://www.google.com/settings/ads/onweb/
  For more information from Google on how you can block certain ads, click here: https://support.google.com/ads/answer/2662922?hl=en
  You can also enter your preferences for online advertising here, regardless of the provider: https://www.youronlinechoices.com
  Alternatively, you can use the administration page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
• Privacy policy of Google: https://policies.google.com/privacy
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.

The main contents of the Joint Responsibility Agreement with Google are available here: https://privacy.google.com/businesses/controllerterms/

Google AdSense

Our website uses “AdSense” of the company Google Ireland Ltd. (Google) to place ads on the Google advertising network (e.g., in search results, in videos, on web pages, etc.) so that they are displayed to users who have a presumed interest in the ads. Furthermore, we measure the conversion of the ads. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page marked with a so-called “conversion tracking tag”. However, we ourselves do not receive any information with which users can be identified. However, in the context of so-called conversion measurements, we can check which of our online marketing methods have led to a so-called conversion, i.e., for example, to a contract being concluded with us. The conversion measurement is used solely to analyse the success of our marketing measures.

Our website uses Google AdSense exclusively with anonymised IP addresses. This means that your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to Google's parent company in the USA and shortened there.

• Shared responsibility: We are jointly responsible for the integration of Google AdSense along with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Purpose of the processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company.
• Legal basis: For the use of cookies for Google AdSense, you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with effect for the future by deselecting the option for “Marketing” or “Google AdSense" in the cookie settings on our site. Our overriding legitimate interest pursuant to Art. 6 Para. 1 Sent. 1 lit. f GDPR is to advertise our products and services.
• Storage period: With regard to the storage period by Google, we refer you to their privacy policy.
• Objection / Opt-Out: You can deactivate personalised advertising directly at Google: https://www.google.com/settings/ads/onweb/
  For more information from Google on how you can block certain ads, click here: https://support.google.com/ads/answer/2662922?hl=en
  You can also enter your preferences for online advertising here, regardless of the provider: https://www.youronlinechoices.com
  Alternatively, you can use the administration page of the Network Advertising Initiative: http://www.networkadvertising.org/consumer/opt_out.asp
• Privacy policy of Google: https://policies.google.com/privacy
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.

The main contents of the Joint Responsibility Agreement with Google are available here: https://privacy.google.com/businesses/controllerterms/

Remarketing by e-mail

In certain cases, we use your e-mail address to send advertising for similar items or services. For example, you may receive a reminder e-mail if you are already a customer of ours and you have cancelled the order process in the shopping cart when placing another order.

• Legal basis and legitimate interest: Direct advertising
• Legal basis: Art. 6 para. 1 p. 1 lit. f DSGVO in conjunction with. § Section 7 (3) UWG
• Objection / Opt-Out: You can object to this use of your contact address at any time by notifying us by e-mail or by clicking on the unsubscribe link in our advertising e-mails. This will not incur any costs for you other than transmission according to basic rates.
• Data recipient: Newsletter service provider (see there)

IV.9. Videos

Vimeo videos

Our website uses the embedding function of Vimeo. When you visit a website with an embedded Vimeo video, a connection to Vimeo servers is established. This tells Vimeo which pages you are visiting. If you are logged into your Vimeo account, Vimeo can assign your surfing behaviour to you personally. You can prevent this by logging out of your Vimeo account beforehand. When a Vimeo video is started, Vimeo uses cookies that collect information about user behaviour. For further information on the purpose and scope of data collection and processing by Vimeo, please refer to Vimeo's privacy policy.

• Purpose of the processing: Provision of a comprehensive and professional online offer also with videos. User-friendly playback option without changing the website. Speed of video playback.
• Legal basis: For the use of Vimeo you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with future effect by deselecting “External Media” or “Vimeo” in the cookie settings on our site. The evaluation on the part of Vimeo is carried out in accordance with Art. 6 Para. 1 lit. f GDR on the basis of the legitimate interests of Vimeo in the insertion of personalised advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles, and you must contact Vimeo to exercise this right.
• Storage period: We store the anonymised data determined in this way for a maximum period of 14 months. Afterwards, the data is deleted automatically. With regard to the storage period by Vimeo, we refer you to their privacy policy.
• Data recipient: Vimeo Inc, Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA
• Privacy policy of Vimeo: https://vimeo.com/privacy
• Third-country transfer: If non-anonymised data is transferred to Vimeo Inc., then data processing takes place in the USA.

IV.10. Online maps

Our Internet presence uses online map services provided by the respective provider. When you call up a page, your browser loads the required maps into its browser cache in order to display the map and navigation correctly.

For this purpose, the browser you use must connect to the servers of the respective provider. Through this, the provider obtains knowledge that our website was accessed via your IP address.

• Purpose of the processing: User-friendly graphical address data display and navigation
• Legal basis and legitimate interests: The integration is based on our legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f. GDPR) in a technically secure, maintenance-free and efficient use of online map services, their uniform presentation and taking into account possible licensing restrictions for their integration.

We use online map services from the following provider:

Google

• Shared responsibility: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• together with the controller (see above)

• Data protection information from Google: https://policies.google.com/privacy
• Joint Responsibility Agreementaccording to Art. 26 GDPR: https://privacy.google.com/businesses/controllerterms/
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.

IV.11. Social media

Our website uses social plugins from various social networks. In order to increase the protection of your data when visiting our website, these buttons are not fully integrated into the page as plug-ins, but only using an HTML link. This type of integration ensures that when a page of our website containing such buttons is called up, no connection is yet established with the servers of the respective social network. When you click on the button, a new browser window opens and calls up the page of the social network. If necessary, after entering your login data, you can then carry out the function provided (e.g. “like” or “share”).

By clicking on the respective plugin, you are giving us your personal consent to the transmission of data to the respective social network. In particular, your IP address is transmitted to the respective social network. The legal basis for this is Art. 6 Para. 1 lit. a GDPR. You have the right to revoke your consent at any time. The data processing remains lawful until revocation. The revocation is only valid for the future.

The following social networks are used:

Pinterest

• Data recipient: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”), parent company: Pinterest Inc, 505 Brannan Street San Francisco, CA 94107, USA
• Privacy policy of Pinterest: https://policy.pinterest.com/en/privacy-policy
• Third-country transfer: If non-anonymised data is transferred to Pinterest Inc., then data processing takes place in the USA.

IV.12. Spam protection

Google reCAPTCHA

Our website uses Google reCAPTCHA, a service provided by Google Ireland Ltd. (Google), to protect against misuse of our web forms and spam. This service monitors the user's behaviour when filling out the web form in order to distinguish humans from bots. If a bot is detected, the web form is blocked, thus preventing misuse. To do this, a code embedded in the web page, a so-called JavaScript, must be executed. Individual user input is not required. Cookies are not set for this purpose. Personal data is neither stored by the responsible party nor by Google. So-called Google WebFonts are also loaded to run the service.

• Purpose of the processing: Protection against misuse of the web forms and spam
• Legal basis: The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our overriding legitimate interest in improving the security and functionality of our internet presence.
• Automated decision making: Google calculates a score to distinguish human input from abusive bot input. If the score does not reach a certain value, the request is considered the input of a bot and the web form is not sent. If you are for some reason unable to submit the web form, there are several alternatives for contacting the controller (e.g. letter, fax, e-mail). A significant impairment is not associated with this.
• Storage period: We do not store any data in connection with this service.
• Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Privacy policy of Google: https://policies.google.com/privacy
• Third-country transfer: If non-anonymised data is transferred to Google LLC, then data processing takes place in the USA.

IV.13. Buyer reviews

Google Customer Reviews

We use the “Google customer reviews” programme from Google on our website. This programme gives us the opportunity to collect customer reviews from users of our website. After making a purchase in our shop, you will be asked whether you would like to take part in an e-mail survey from Google. If you give your consent in accordance with Art. 6 Para. 1 lit. a GDPR, we will transmit your e-mail address to Google. You will receive an e-mail from Google customer reviews asking you to rate the buying experience at our online shop. The review you submit will then be aggregated with our other reviews and displayed in our Google customer reviews logo and in our Merchant Center dashboard. In addition, your rating will be used for Google Seller Ratings. Google may also use cookies for this purpose.

• Shared responsibility: We are jointly responsible for the integration of Google customer reviews along with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Purpose of the processing: Product marketing, advertising, customer surveys
• Legal basis: For the use of Google customer reviews, you may give us your consent in accordance with Art. 6 Para. 1 Sent. 1 lit. a GDPR, which you can revoke at any time with effect for the future. You can register your preferences with Google that you are against the setting of cookies here: https://www.google.com/policies/privacy/ads/
• Alternatively, you can object to the use of cookies by a third-party provider for the purpose of interest-based ads.
• Privacy policy of Google: https://policies.google.com/privacy

The main contents of the Joint Responsibility Agreement with Google are available here: https://privacy.google.com/businesses/controllerterms/

Trusted Shops

The Trusted Shops seal of approval is integrated on this website so that the Trusted Shops seal of approval can be displayed, including any reviews that have been written, and to offer Trusted Shops products to buyers after they have placed an order.

When the seal of approval is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of the retrieval, the amount of data transferred and the requesting provider (access data) and documents the call-up. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your visit to the site.

Any further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

• Purpose of the processing: Product marketing, advertising, customer surveys
• Legal basis and legitimate interests: This integration is based on our legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f. GDPR) in the optimal marketing of our offers (advertising).
• Data recipient: Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany
• Privacy policy of Trusted Shops: https://www.trustedshops.co.uk/imprint/

IV.14. Opening a customer account

If you open a personal customer account with us for future orders, the following provisions apply:

• Purpose of the processing: User contract for the personal customer account.
• Legal basis: Contract pursuant to Art. 6 Para. 1 lit. b GDPR. Your consent pursuant to Art. 6 Para. 1 lit. a GDPR applies to the data you voluntarily provide.
• Obligation to provide information: The mandatory information can be found on the registration form. We cannot open an account for you without this data.
• Data recipient: The customer account is managed via our online shop. This is operated by our web host (see above).
• Storage period: Your data in the customer account will be stored as long as the user contract with us exists. Voluntary information will be stored until you revoke it. Afterwards, the data are restricted for processing purposes and stored for up to three years in order to be able to prove a formerly granted consent in a legally compliant manner. This is done on the basis of our legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f. GDPR) in the verifiability of data protection compliance.

IV.15. Ordering goods or services

IV.15.c. General Information

• Purpose of the processing: Execution of your order.
• Legal basis: Contract pursuant to Art. 6 Para. 1 lit. b GDPR. Your consent pursuant to Art. 6 Para. 1 lit. a GDPR applies to the data you voluntarily provide. For any other processing, Art. 6 Para. 1 lit. f GDPR applies.
• Legitimate interests: Debt collection and enforcement; business management measures and further development of services and products
• Data recipient: Web host of the online shop (see above). Shipping and payment service providers. Lawyer, debt collection agency, management consultant.

IV.15.d. Payment processing

• Purpose of the processing: Execution of the order. Processing of the payment.
• Legal basis: Contract pursuant to Art. 6 Para. 1 lit. b GDPR.
• Obligation to provide information: Depending on the selected method of payment, you must provide us or the payment service provider with the required payment data.
• Data recipient: The payment service providers used are listed below:

PayPal

• Service provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, https://www.paypal.com/uk/home
• Privacy policy of PayPal: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
• Credit report: PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, “purchase on account” or “payment by instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

Unzer (formerly Heidelpay)

If you select purchase on account or payment by credit card via Unzer as the method of payment, the payment will be processed via Unzer E-Com GmbH (hereinafter “Unzer E-Com”). Unzer E-Com GmbH is a payment service provider and certified according to the Payment Card Industry Data Security Standard (PCI DSS).

• Service provider: Unzer E-Com GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany, https://www.unzer.com/en
• Privacy policy of Unzer E-Com: https://www.unzer.com/en/datenschutz/

a. Payment by credit card

For payment by credit card via Unzer, your payment data collected during the ordering process will be transmitted to Unzer E-Com GmbH for the purpose of executing the payment. If necessary, the data will be transferred, for the purpose of payment processing, by Unzer E-Com GmbH to Unzer Luxembourg S.A. 1, Place du Marché, L-6755 Grevenmacher, Luxembourg, which collects the corresponding payments from the card companies.

b. Payment on account or by direct debit

When purchasing on account and by direct debit via Unzer, you will be subjected to a check on our behalf by a credit agency commissioned by Unzer E-Com GmbH using mathematical-statistical procedures (credit check/scoring). Your data required for the credit assessment (name, postal address, e-mail address, telephone number and date of birth) will be transmitted to Unzer E-Com GmbH, which may pass the data on to the following credit agency/agencies for the purpose of credit assessment:

• SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
• CRIF Bürgel GmbH, Gasstraße 18, 22761 Hamburg, Germany
• Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden, Germany
• Deltavista GmbH, Kaiserstrasse 217, 76133 Karlsruhe, Germany
• UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main, Germany
• Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt, Germany
• Regis24 GmbH, Wallstraße 58, 10179 Berlin, Germany
• Creditreform AG, Hellersbergstraße 12, 41460 Neuss, Germany

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

• Legal basis and legitimate interests: Our overriding legitimate interest under Art. 6 Para. 1 f GDPR to check your solvency and thus protect us from financial default.
• Right to object: You can object to the processing of data for the purpose of credit assessment at any time by informing us via the contact options below or by contacting Unzer E-Com. However, Unzer E-Com may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

IV.15.e. Shipping and handling

• Purpose of the processing: Execution of the order. Delivery of the goods. Notification of delivery. Tracking.
• Legal basis: Name, address and telephone number, if applicable: Contract pursuant to Art. 6 Para. 1 lit. b GDPR. Forwarding of the e-mail address to shipping service providers: Consent according to Art. 6 Para. 1 lit. a GDPR.
• Obligation to provide information: Without your name, address and, if applicable, telephone number, the respective shipping company cannot deliver the goods to you. Without your consent to pass on the e-mail address to shipping service providers, you will not receive any tracking information from them.
• Data recipient: The shipping service providers used are listed below:
• DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany)

IV.15.f. Direct mail

• Purpose of the processing: Direct advertising, sales promotion
• Legal basis: Our overriding legitimate interest according to Art. 6 Para. 1 lit. f GDPR
• Legitimate interests: Direct advertising, sales promotion
• Data recipient: Agency, Lettershop

IV.15.g. Legal obligation

• Purpose of the processing: Fulfilment of legal obligations (e.g. information, notification, disclosure and storage obligations, payment of taxes and duties)
• Legal basis: The respective legal regulation in connection with Art. 6 Para. 1 lit. c GDPR applies.
• Data recipient: Authorities, state institutions, lawyers, tax advisors, data protection officer if necessary

V. What data protection rights do I have?

1. As a data subject, you have the following rights:

• Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 of the GDPR;
• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 of the GDPR;
• Rectification: You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;
• Erasure: You have the right to request the immediate deletion of personal data concerning you. The requirements for this can be found in Art. 17 of the GDPR;
• Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 of the GDPR;
• Data portability: You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to have this data transferred by us to another controller. The requirements for this can be found in Art. 20 of the GDPR;
• Withdrawal of consent: You have the right to revoke your consent at any time if the processing is based on Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR. The data processing remains lawful until revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 Para. 3 DSGVO;
• Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider the processing of personal data concerning you infringes upon the GDPR. The requirements for this can be found in Art. 77 of the GDPR. You can contact the supervisory authority responsible for the controller or the supervisory authority in your country or federal state. You can find a list of all supervisory authorities here: https://pdpecho.com/the-list/

2. Right of object

3. Right to object to the processing of data for the purposes of direct marketing and product evaluations

• We collect and process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
• In individual cases, we process and use your personal data to send you a product review and/or other review requests by e-mail that are exclusively related to your purchase, transaction and/or other analogous transactions. Furthermore, we may also use your e-mail address and/or postal address in this context to send you product recommendations by e-mail and/or post about similar goods and/or services offered by us. You will receive these review requests and product recommendations from us regardless of whether you have subscribed to a newsletter.
• Exercising your right to object: You may object to these review requests and product recommendations at any time by sending a letter to VanDeBord GmbH, Robert-Bosch-Straße 1, 63755 Alzenau, Germany, or by sending an e-mail to pilot@vandebord.com and/or at the end of each review and/or product recommendation e-mail with effect for the future without incurring any costs other than the respective transmission costs according to the base rates. Your right to object automatically applies to any possible profiling, insofar as it is connected with such direct advertising. If you object to data processing as it relates to product reviews and/or other evaluation requests and/or product recommendations, we will no longer process your personal data for these purposes with effect for the future.
• If you object to data processing as it relates to direct marketing purposes, we will no longer process your personal data for these purposes with effect for the future.

VI. How long will my data be stored?

Unless otherwise provided for above, the following criteria apply in determining the storage period:

• In the event consent is given pursuant to Art. 6 Para. 1 a GDPR, the data will be stored until the data subject revokes the data subject’s consent.
• If pre-contractual and contractual purposes pursuant to Art. 6 Para. 1 lit. b GDPR are present, the data will be stored until the termination of the contract.
• In the case of our overriding legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for continued processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
• In the case of direct advertising pursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 2, 3 GDPR.

Apart from that, personal data is only stored for as long as there is a legal reason to store it.

VII. Source of the data

We process personal data that we have received from you or the recipients of personal data.

VIII. Obligation to provide data

As part of the performance of our contractual or legally assumed obligations, you as the data subject may be legally obliged to provide our company with information and personal data that is required for the establishment, implementation and termination of the contractual relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or will no longer be able to implement an existing contract and may have to terminate it.

IX. Copyright

Privacy Information Copyright 2021 Attorney-at-law Marc Oliver Giel

Facebook

I. Scope of Application

With this document, the data controllers would like to fulfil their information obligations vis-a-vis data subjects in accordance with Art. 13 of the General Data Protection Regulation (GDPR). This privacy information is published at https://www.vandebord.de/en/privacy-policy and has been in effect since April 2021 for the Facebook profile at https://www.facebook.com/VanDeBord. Due to the further development of our internet presence or due to changed legal or official requirements, it may become necessary to change this data protection information. The amended version will be announced here.

II. Who is responsible for data processing?

Pursuant to Art. 4 No. 7, 26 GDPR, the joint data controllers for the processing of the data are:

• Facebook Ireland Ltd. (hereinafter referred to as “Facebook”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
• VanDeBord GmbH, Robert-Bosch-Straße 1, 63755 Alzenau, Germany. The complete legal notice can be viewed here: https://www.vandebord.de/en/legal-notice
• (hereinafter referred to as “we” or “us”)

The main contents of the Joint Responsibility Agreement pursuant to Art. 26 GDPR are available here: https://www.facebook.com/legal/controller_addendum

III. Who is the data protection officer?

The data controller has appointed the following company data protection officer:

Marc Oliver Giel, Lagerstr. 11 A, 64807 Dieburg, Germany, e-mail address: giel@datamog.de

IV. Why is your data processed?

IV.1. Processing by Facebook

• Purpose of the processing: To our knowledge, Facebook processes users' data for the following purposes: Advertising (analysis, creation of personalised advertising), creation of user profiles and market research. The nature and extent of the processing of personal data can be found in Facebook's data policy at: https://www.facebook.com/policy
• Legal basis: see Facebook's data policy at: https://www.facebook.com/policy
• Third-country transfer: Facebook Ireland, to our knowledge, transmits users' data to its parent company in the USA.
• Appropriate safeguards for the transfer of data: Facebook relies on the Commission's standard data protection clauses under Art. 46 Para. 2 c) GDPR for data transfers to the US, cf. https://www.facebook.com/help/566994660333381?ref=dp
• Storage period: see Facebook's data policy at: https://www.facebook.com/policy

IV.2. Cookies

Facebook uses so-called cookies. We have no influence on the scope and content of the uses of those cookies. Therefore, we refer you to the information from Facebook on the subject of cookies at: https://www.facebook.com/policies/cookies/

IV.3. Facebook Insights

Statistical data from different categories are available to us via so-called “Insights”. These statistics are generated by Facebook and made available to our account. We have no influence over this, i.e. we can neither prevent Facebook from collecting the data nor prevent it from being made available to us. For a certain period of time and for the categories fans, subscribers, reached persons and interacting persons, Facebook provides us with the following data relating to our Facebook page:

Total number of page views, likes, page activity, post interactions, reach, video views, post reach, comments, shared content, replies, share of men and women, country and city origin, language, shop views and clicks, route planner clicks, phone number clicks. Data concerning the Facebook groups linked to our Facebook page are also provided in this way, insofar as we use this. Due to the constant development of Facebook, the availability and processing of data changes, so we refer you to Facebook's data policy for up-to-date and further details.

We use this data, which is available in aggregated form, to make our posts and activities on our Facebook page more attractive to users. Information about the type of end devices used by visitors helps us to adapt the visual design of the articles accordingly.

More information regarding the contractual content between us and Facebook is available here: https://www.facebook.com/legal/terms/page_controller_addendum

IV.4. Contact

In the event that you contact us electronically (e.g. via Facebook Messenger or e-mail), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used by us exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information we cannot process your request. All other information is voluntary.

• Purpose of the processing: Answering your request.
• Legal basis: Art. 6 Para. 1 lit. f GDPR, Art. 6 Para. 1 lit. b GDPR for pre-contractual or contractual matters. The legal basis for your voluntary information is Art. 6 Para. 1 lit. a GDPR.
• Legitimate interests: The processing is carried out on the basis of our legitimate interest in responding to your inquiry and/or request
• Recipient of the data: Facebook
• Storage period: Your data will be deleted by us after we have completed processing your inquiry and/or request. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your request will be stored until the end of the contract and then restricted in processing. If there is no longer a legal reason to store the data, it will be deleted.

V. What data protection rights do I have?

1. As a data subject, you have the following rights:

• Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 of the GDPR;
• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 of the GDPR;
• Rectification: You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;
• Erasure: You have the right to request the immediate deletion of personal data concerning you. The requirements for this can be found in Art. 17 of the GDPR;
• Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 of the GDPR;
• Data portability: You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to have this data transferred by us to another controller. The requirements for this can be found in Art. 20 of the GDPR;
• Withdrawal of consent: You have the right to revoke your consent at any time if the processing is based on Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR. The data processing remains lawful until revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 Para. 3 DSGVO;
• Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider the processing of personal data concerning you infringes upon the GDPR. The requirements for this can be found in Art. 77 of the GDPR. You can contact the supervisory authority responsible for the controller or the supervisory authority in your country or federal state. You can find a list of all supervisory authorities here: https://pdpecho.com/the-list/

2. Right of object

3. Your rights vis-à-vis Facebook

VI. How long will my data be stored?

Unless otherwise provided for above, the following criteria apply in determining the storage period:

• In the event consent is given pursuant to Art. 6 Para. 1 a GDPR, the data will be stored until the data subject revokes the data subject’s consent.
• If pre-contractual and contractual purposes pursuant to Art. 6 Para. 1 lit. b GDPR are present, the data will be stored until the termination of the contract.
• In the case of our overriding legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for continued processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
• In the case of direct advertisingpursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 2, 3 GDPR.

Apart from that, personal data is only stored for as long as there is a legal reason to store it.

VII. Where does the data come from?

We collect and process data that we receive from you directly and data that we receive from Facebook.

VIII. Copyright

Privacy Information Copyright 2021 Attorney-at-law Marc Oliver Giel

Instagram

I. Scope of Application

With this document, the data controllers would like to fulfil their information obligations vis-a-vis data subjects in accordance with Art. 13 of the General Data Protection Regulation (GDPR). This privacy information is published at https://www.vandebord.de/en/privacy-policy and has been in effect since April 2021 for the Instagram profile at https://www.instagram.com/vandebord/. Due to the further development of our internet presence or due to changed legal or official requirements, it may become necessary to change this data protection information. The amended version will be announced here.

II. Who is responsible for data processing?

Pursuant to Art. 4 No. 7, 26 GDPR, the joint data controllers for the processing of the data are:

• Facebook Ireland Ltd. (hereinafter referred to as “Facebook” or “Instagram”), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Instagram is a service provided by Facebook).
• VanDeBord GmbH, Robert-Bosch-Straße 1, 63755 Alzenau, Germany. The complete legal notice can be viewed here: https://www.vandebord.de/en/legal-notice (hereinafter referred to as “we” or “us”)

The main contents of the Joint Responsibility Agreement pursuant to Art. 26 GDPR are available here: https://www.facebook.com/legal/controller_addendum

III. Who is the data protection officer?

The data controller has appointed the following company data protection officer:

Marc Oliver Giel, Lagerstr. 11 A, 64807 Dieburg, Germany, e-mail address: giel@datamog.de

IV. Why is your data processed?

IV.1. Processing by Facebook

• Purpose of the processing: To our knowledge, Facebook processes users' data for the following purposes: Advertising (analysis, creation of personalised advertising), creation of user profiles and market research. The nature and extent of the processing of personal data is set out in Facebook's privacy policy for Instagram at: https://instagram.com/about/legal/privacy
• Legal basis: see Facebook's privacy policy for Instagram at: https://instagram.com/about/legal/privacy
• Third-country transfer: Facebook Ireland, to our knowledge, transmits users' data to its parent company in the USA.
• Appropriate safeguards for the transfer of data: Facebook relies on the Commission's standard data protection clauses under Art. 46 Para. 2 c) GDPR for data transfers to the US, cf. https://www.facebook.com/help/566994660333381?ref=dp
• Storage period: see Facebook's privacy policy for Instagram at: https://instagram.com/about/legal/privacy

IV.2. Cookies

Facebook uses so-called cookies. We have no influence on the scope and content of the uses of those cookies. Therefore, we refer you to the information from Facebook on the subject of cookies at: https://www.instagram.com/legal/cookies/

IV.3. Instagram Insights

Statistical data from different categories are available to us via so-called “Insights”. These statistics are generated by Instagram and made available to our account. We have no influence over this, i.e. we can neither prevent Instagram from collecting the data nor prevent it from being made available to us.

According to Facebook, these are essentially the three insights as laid out below:

• Interactions: Measurement of actions on the Instagram account within a certain period of time. Actions also include, for example, visits and website clicks.
• Discovery:Measuring the number of people who have accessed Instagram content and information about where they discovered it. This mainly involves determining what reach and how many impressions the Instagram content has achieved. The reach here is the number of individual accounts that have accessed the posts. Impressions refers to the total number of views of the posts.
• Target group:Information about current subscribers on Instagram. In particular, the development of the number of subscribers.

Due to the constant development of Instagram, the availability and processing of data changes, so we refer you to Instagram's data protection policy for up-to-date and further details.

We use this data, which is available in aggregated form, to make our posts and activities on our Instagram account more attractive to users. Information about the type of end devices used by visitors helps us to adapt the visual design of the articles accordingly.

More information regarding the contractual content between us and Facebook is available here: https://www.facebook.com/legal/terms/page_controller_addendum

IV.4. Contact

In the event that you contact us electronically (e.g. via Instagram Direct (Direct Messaging or e-mail), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used by us exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information we cannot process your request. All other information is voluntary.

• Purpose of the processing: Answering your request.
• Legal basis: Art. 6 Para. 1 lit. f GDPR, Art. 6 Para. 1 lit. b GDPR for pre-contractual or contractual matters. The legal basis for your voluntary information is Art. 6 Para. 1 lit. a GDPR.
• Legitimate interests: The processing is carried out on the basis of our legitimate interest in responding to your inquiry and/or request
• Recipient of the data: Facebook
• Storage period: Your data will be deleted by us after we have completed processing your inquiry and/or request. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your request will be stored until the end of the contract and then restricted in processing. If there is no longer a legal reason to store the data, it will be deleted.

V. What data protection rights do I have?

1. As a data subject, you have the following rights:

• Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 of the GDPR;
• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 of the GDPR;
• Rectification: You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;
• Erasure: You have the right to request the immediate deletion of personal data concerning you. The requirements for this can be found in Art. 17 of the GDPR;
• Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 of the GDPR;
• Data portability: You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to have this data transferred by us to another controller. The requirements for this can be found in Art. 20 of the GDPR;
• Withdrawal of consent: You have the right to revoke your consent at any time if the processing is based on Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR. The data processing remains lawful until revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 Para. 3 DSGVO;
• Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider the processing of personal data concerning you infringes upon the GDPR. The requirements for this can be found in Art. 77 of the GDPR. You can contact the supervisory authority responsible for the controller or the supervisory authority in your country or federal state. You can find a list of all supervisory authorities here: https://pdpecho.com/the-list/

2. Right of object

3. Your rights vis-à-vis Facebook

VI. How long will my data be stored?

Unless otherwise provided for above, the following criteria apply in determining the storage period:

• In the event consent is given pursuant to Art. 6 Para. 1 a GDPR, the data will be stored until the data subject revokes the data subject’s consent.
• If pre-contractual and contractual purposes pursuant to Art. 6 Para. 1 lit. b GDPR are present, the data will be stored until the termination of the contract.
• In the case of our overriding legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for continued processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
• In the case of direct advertisingpursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 2, 3 GDPR.

Apart from that, personal data is only stored for as long as there is a legal reason to store it.

VII. Where does the data come from?

We collect and process data that we receive from you directly and data that we receive from Facebook.

VIII. Copyright

Privacy Information Copyright 2021 Attorney-at-law Marc Oliver Giel

Pinterest

I. Scope of Application

With this document, the controller wishes to fulfil its obligations to provide information to data subjects in accordance with Art. 13 of the General Data Protection Regulation (GDPR). This privacy information is published at https://www.vandebord.de/en/privacy-policy and has been in effect since April 2021 for the Pinterest profile at http://www.pinterest.com/flugzeugtrolley/. Due to the further development of our internet presence or due to changed legal or official requirements, it may become necessary to change this data protection information. The amended version will be announced here.

II. Who is responsible for data processing?

The data controller pursuant to Art. 4 No. 7 GDPR is:

VanDeBord GmbH, Robert-Bosch-Straße 1, 63755 Alzenau, Germany.The complete legal notice is available here: https://www.vandebord.de/en/legal-notice

III. Who is the data protection officer?

The data controller has appointed the following company data protection officer:

Marc Oliver Giel, Lagerstraße 11a, 64807 Dieburg, Germany, e-mail: giel@datamog.de

IV. Why is your data processed?

IV.1. Processing by Pinterest

By using Pinterest, your personal information will be collected, transferred, stored, disclosed and used by Pinterest and, in doing so, will be transferred to and stored and used in the United States, Ireland and any other country in which Pinterest does business, regardless of your country of residence. Pinterest processes, among other things, your voluntarily entered data such as name and user name, e-mail address or telephone number.

Pinterest also evaluates the content you share in order to figure out which topics you are interested in.

• Data recipient: Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
• Parent company: Pinterest Inc, 651 Brannan Street, San Francisco, CA 94107, USA
• Privacy policy of Pinterest: https://policy.pinterest.com/en/privacy-policy
• Third-country transfer: If non-anonymised data is transferred to Pinterest Inc., then data processing takes place in the USA.
• Sufficient guarantees for the transfer of data: Pinterest relies on the Commission's standard data protection clauses under Art. 46 Para. 2 c) GDPR for data transfers to the US.
• Storage period: see Pinterest’s data policy at https://policy.pinterest.com/en/privacy-policy

IV.2. Cookies

Pinterest uses so-called cookies. We have no influence on the scope and content of the uses of those cookies. Therefore, we refer you to the information from Pinterest on the subject of cookies at: https://policy.pinterest.com/en/cookies

IV.3. Pinterest Insights

Audience Insights

Statistical data from different categories are available to us via so-called “Audience Insights”. These statistics are generated by Pinterest and made available to our account. We have no influence over this, i.e. we can neither prevent Pinterest from collecting the data nor prevent it from being made available to us.

We use this data, which is available in aggregated form, to make our posts and activities on our Pinterest profile more attractive to users. Information about the type of end devices used by visitors helps us to adapt the visual design of the articles accordingly.

Pinterest provides more information here: https://help.pinterest.com/en/business/article/audience-insights

Conversion Insights

For us, reports are available via the “Conversion Insights”, which measure the overall impact of our organic pins, which are not ads, and our ads on website traffic and online checkouts. These reports are generated by Pinterest and made available to our account. We have no influence over this, i.e. we can neither prevent Pinterest from collecting the data nor prevent it from being made available to us.

We use this data, which is available in aggregated form, to make our posts and activities on our Pinterest profile more attractive to users. Information about the type of end devices used by visitors helps us to adapt the visual design of the articles accordingly.

Pinterest provides more information here:

Analytics

For us, data concerning overall performance, video analytics, top pins and pinboards can be accessed via “Pinterest Analytics”. This data is generated by Pinterest and made available to our account. We have no influence over this, i.e. we can neither prevent Pinterest from collecting the data nor prevent it from being made available to us.

We use this data, which is available in aggregated form, to make our posts and activities on our Pinterest profile more attractive to users. Information about the type of end devices used by visitors helps us to adapt the visual design of the articles accordingly.

Pinterest provides more information here: https://help.pinterest.com/en/business/article/audience-insights

IV.4. Contact

In the event that you contact us electronically (e.g. via Pinterest or e-mail), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used by us exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information we cannot process your request. All other information is voluntary.

• Purpose of the processing: Answering your request.
• Legal basis: Art. 6 Para. 1 lit. f GDPR, Art. 6 Para. 1 lit. b GDPR for pre-contractual or contractual matters. The legal basis for your voluntary information is Art. 6 Para. 1 lit. a GDPR.
• Legitimate interests: The processing is carried out on the basis of our legitimate interest in responding to your inquiry and/or request
• Recipient of the data: Pinterest
• Storage period: Your data will be deleted by us after we have completed processing your inquiry and/or request. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your request will be stored until the end of the contract and then restricted in processing. If there is no longer a legal reason to store the data, it will be deleted.

V. What data protection rights do I have?

1. As a data subject, you have the following rights:

• Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 of the GDPR;
• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 of the GDPR;
• Rectification: You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;
• Erasure: You have the right to request the immediate deletion of personal data concerning you. The requirements for this can be found in Art. 17 of the GDPR;
• Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 of the GDPR;
• Data portability: You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to have this data transferred by us to another controller. The requirements for this can be found in Art. 20 of the GDPR;
• Withdrawal of consent: You have the right to revoke your consent at any time if the processing is based on Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR. The data processing remains lawful until revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 Para. 3 DSGVO;
• Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider the processing of personal data concerning you infringes upon the GDPR. The requirements for this can be found in Art. 77 of the GDPR. You can contact the supervisory authority responsible for the controller or the supervisory authority in your country or federal state. You can find a list of all supervisory authorities here: https://pdpecho.com/the-list/

2. Right of object

3. Rights vis-à-vis Pinterest

VI. How long will my data be stored?

Unless otherwise provided for above, the following criteria apply in determining the storage period:

• In the event consent is given pursuant to Art. 6 Para. 1 a GDPR, the data will be stored until the data subject revokes the data subject’s consent.
• If pre-contractual and contractual purposes pursuant to Art. 6 Para. 1 lit. b GDPR are present, the data will be stored until the termination of the contract.
• In the case of our overriding legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for continued processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
• In the case of direct advertisingpursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 2, 3 GDPR.

Apart from that, personal data is only stored for as long as there is a legal reason to store it.

VII. Where does the data come from?

We collect and process data that we receive from you directly and data that we receive from Pinterest.

VIII. Copyright

Privacy Information Copyright 2020 Attorney-at-law Marc Oliver Giel

Youtube

I. Scope of Application

With this document, the controller wishes to fulfil its obligations to provide information to data subjects in accordance with Art. 13 of the General Data Protection Regulation (GDPR). This privacy information is published at https://www.vandebord.de/en/privacy-policy and has been in effect since April 2021 for the YouTube channel at https://www.youtube.com/channel/UC30llTrO7o5-uxGeowZTB5g. Due to the further development of social media platforms or due to changed legal or official requirements, it may become necessary to change this data protection information. The amended version will be announced here.

II. Who is responsible for data processing?

The data controller pursuant to Art. 4 No. 7 GDPR is:

VanDeBord GmbH, Robert-Bosch-Straße 1, 63755 Alzenau, Germany.The complete legal notice is available here: https://www.vandebord.de/en/legal-notice

III. Who is the data protection officer?

The data controller has appointed the following company data protection officer:

Marc Oliver Giel, Lagerstr. 11 A, 64807 Dieburg, Germany, e-mail address: giel@datamog.de

IV. Why is your data processed?

IV.1. Processing by YouTube

YouTube is operated by Google Ireland Ltd. (“Google”). We maintain a profile there in order to provide our corporate videos. Google collects data on its platform to provide its services, from basic information such as your IP address and language, to more complex things such as:

• Advertisements that you find particularly useful,
• People you interact with most online, or the
• YouTube videos that you find interesting.

The data Google collects and how it is used depends on how you use these services and how you manage your privacy settings.

If you are not signed in to your Google account, Google stores the data it collects with unique identifiers associated with the browser, app or device you are using. This allows Google to ensure, for example, that your language settings are retained across all browsing sessions. When you are logged into your Google account, Google also collects data that the company stores in your Google account.

When you create a Google account, you provide Google with personal information, including your name and a password. You can also add a phone number or payment information to your account. Even if you are not signed in to a Google account, you can provide Google with data, such as an email address, to receive notifications about their services.

Google also collects the content you create, upload or receive from others when using our services. This includes, for example, e-mails you write and receive, photos and videos you save, documents and spreadsheets you create, and comments you write on YouTube videos.

For more information about what data Google processes and for what purposes, please see their privacy policy.

Google uses the data collected to personalise the services offered. This includes the provision of recommendations, personalised content and personalised search results. For example, the security check provides you with security tips tailored to your personal use of Google products. Google Play uses data, such as apps you have installed and videos you have watched on YouTube, to recommend new apps you might like.

Google also provides you with a place where you can review the data stored in your Google account and control its storage.

• Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Privacy Policy of Google: https://policies.google.com/privacy?hl=en
• Privacy Policy of YouTube Kids: https://kids.youtube.com/t/privacynotice
• Legal basis: Your user agreement with YouTube pursuant to Art. 6 Para. 1 Sent. 1 lit. b) GDPR.
• Third-country transfer: If non-anonymised data is transferred to Google Inc., then data processing takes place in the USA.
• Google data centres: https://www.google.com/about/datacenters/locations/
• Subcontractors of Google: https://privacy.google.com/businesses/subprocessors/
• Sufficient guarantees for the transfer of data: We have concluded an order processing agreement with Google for the protection of personal data. Google relies on the Commission's standard data protection clauses under Art. 46 Para. 2 c) GDPR for data transfers to the US, cf. https://www.youtube.com/t/terms_dataprocessing
• Storage duration: see Google privacy policy at https://policies.google.com/privacy?hl=en

IV.2. Processing by us

We process the data you have entered in your profile, in particular for the following activities:

• If you follow us, you will be shown to us as a subscriber
• If you “like” our post, comment or share
• If you send us a message via the contact function

Furthermore, we receive anonymised statistical data from YouTube about the users of our YouTube profile.

 

IV.3. Cookies

YouTube (Google) uses so-called cookies. We have no influence on the scope and content of the uses of those cookies. Therefore, we refer you to the information from Google on the subject of cookies at: https://policies.google.com/technologies/cookies?hl=en

IV.4. Contact

In the event that you contact us electronically (e.g. via YouTube or e-mail), personal data will be collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used by us exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information we cannot process your request. All other information is voluntary.

• Purpose of the processing: Answering your request.
• Legal basis: Art. 6 Para. 1 lit. f GDPR, Art. 6 Para. 1 lit. b GDPR for pre-contractual or contractual matters. The legal basis for your voluntary information is Art. 6 Para. 1 lit. a GDPR.
• Legitimate interests: The processing is carried out on the basis of our legitimate interest in responding to your inquiry and/or request
• Recipient of the data: YouTube (Google)
• Storage period: Your data will be deleted by us after we have completed processing your inquiry and/or request. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your request will be stored until the end of the contract and then restricted in processing. If there is no longer a legal reason to store the data, it will be deleted.

V. What data protection rights do I have?

1. As a data subject, you have the following rights:

• Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data is being processed. The requirements for this can be found in Art. 15 of the GDPR;
• Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 of the GDPR;
• Rectification: You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;
• Erasure: You have the right to request the immediate deletion of personal data concerning you. The requirements for this can be found in Art. 17 of the GDPR;
• Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 of the GDPR;
• Data portability: You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format. Furthermore, you have the right to have this data transferred by us to another controller. The requirements for this can be found in Art. 20 of the GDPR;
• Withdrawal of consent: You have the right to revoke your consent at any time if the processing is based on Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR. The data processing remains lawful until revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 Para. 3 DSGVO;
• Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider the processing of personal data concerning you infringes upon the GDPR. The requirements for this can be found in Art. 77 of the GDPR. You can contact the supervisory authority responsible for the controller or the supervisory authority in your country or federal state. You can find a list of all supervisory authorities here: https://pdpecho.com/the-list/

2. Right of object

3. Rights vis-à-vis YouTube (Google)

VI. How long will my data be stored?

Unless otherwise provided for above, the following criteria apply in determining the storage period:

• In the event consent is given pursuant to Art. 6 Para. 1 a GDPR, the data will be stored until the data subject revokes the data subject’s consent.
• If pre-contractual and contractual purposes pursuant to Art. 6 Para. 1 lit. b GDPR are present, the data will be stored until the termination of the contract.
• In the case of our overriding legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for continued processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
• In the case of direct advertisingpursuant to Art. 6 Para. 1 lit. f GDPR, the data will be stored until the data subject exercises the data subject’s right to object pursuant to Art. 21 Para. 2, 3 GDPR.

Apart from that, personal data is only stored for as long as there is a legal reason to store it.

VII. Where does the data come from?

We collect and process data that we receive from you directly and data that we receive from YouTube (Google).

VIII. Copyright

Privacy Information Copyright 2021 Attorney-at-law Marc Oliver Giel