Privacy

Data Protection Policy

Data protection policy terms

Personal data is information that is classified or can be classified directly or indirectly about you. In particular, the General Data Protection Regulation (GDPR) applies as a legal basis for data protection.

We appreciate your interest in data protection on our website. We want you to feel happy and safe when visiting our website and to consider the implementation of data protection as a customer-oriented quality feature.
With the following data protection notices, we inform you about the manner and scope of the processing of personal data on our website.

Contents overview

    1. Overview
    2. Login to our website
    3. Contact Form / Email Contact / Phone Calls / Inquiries
    4. Data processing for advertising purposes
    5. Sending a newsletter
    6. Online presence and optimization of websites
    7. Recipients outside the EU
    8. Your rights as a data subject
    9. Contact persons
    10. Name and contact details of the controller as well as contact details of the operational data protection officer

1. Overview

By entering our website various information is exchanged between your terminal and our forwarder. In this case there may also be processing of personal data. The information collected in this way will be used, among other things, to optimize our website or for advertising in your terminal's browser.

2. Login to our website

Purposes of data processing/ Legal bases:

When entering our website, they are automatically sent by the terminal browser you are using and without your own action

    the IP address of the Internet-enabled device that made the request,
    the date and time of access,
    the name and URL of the requested file,
    the website/application from which the access was made (referrer-URL),
    the browser you use, the operating system of your internet-enabled computer, and the name of the access provider

to our website's forwarder and are temporarily stored in a log file for the following purposes:

    guarantee of correct connection establishment,
    guarantee of comfortable use of our website/app,
    assessment of system security and stability.

If you have consented to so-called geolocation in your browser or in your operating system or in other settings of your terminal, we will use this function to be able to provide you with personalized services related to your current location (e.g. the location of the nearest branch). We will process your location data obtained in this way solely for this function.

The legal basis for the processing of the IP address is Article 6, paragraph 1, point f) of the General Data Protection Regulation (hereinafter: GDPR). Our legitimate interest arises from the aforementioned purposes of data processing.

Recipients / categories of recipients:

As a rule, we exclude the transmission of this data to third parties.

Duration of storage / criteria for determining the duration of storage:

The data is temporarily stored for processing the session and then deleted automatically. Once you stop using our website, the geolocation data is deleted.

3. Contact form / email communication / phone calls / customer inquiries

Purposes of data processing / legal bases:

The personal data you provide us when filling out a contact form, by phone or email, will naturally be treated confidentially by us. We will only use your data for a specific purpose, to process your request. Legal basis for data processing is Article 6, paragraph 1, letter f) GDPR. Both ours and your parallel (legal) interest in such data processing arises based on the objective of providing you with answers and possibly solving any existing problems and thereby maintaining and enhancing your satisfaction as a customer or user of our website.

If you participate in any of our surveys, this is done on a purely voluntary basis. During this anonymous survey, no information is stored that allows conclusions to be drawn about the survey participant. Only the date and time of your participation are saved. Any personal information you provide when responding to our survey is deemed to have been provided voluntarily and is stored in accordance with the GDPR. Please do not mention in the free text fields your name or similar information, which allows conclusions to be drawn about you or other persons. If consent is provided in the context of a customer survey, the legal basis for the data processing, which is based on consent, is Article 6(1)(a) GDPR. If you have provided consents in the context of a customer survey, you have the option to withdraw such consents at any time with effect for the future. More detailed regulations regarding these cases can be found in the specific data protection principles of each customer survey.

Recipients / Categories of recipients:

The transfer of data to third parties is generally prohibited. Exceptionally, the data is processed by processors on our behalf. They are carefully selected each time, checked by us and contractually bound according to Article 28 GDPR.

In addition, we may be required to pass extracts of your request to our counterparties (e.g. other websites) for the purpose of processing your request. If the transmission of your personal data is required in an individual case, we will inform you about this in order to obtain your consent.

The results of our customer surveys are normally only used for internal evaluations. The transfer of data to third parties is generally prohibited. We do not pass on your personal data to third parties, unless we receive your express consent.

Duration of storage / Criteria for determining the duration of storage:

All personal data that you have given us in the context of requests (suggestions, praise or criticism) through this website or by e-mail, are deleted by us or made anonymous within 6 months at the latest.

4. Data processing for advertising purposes

Purposes of data processing / Legal basis:

With your consent, we analyze usage behavior in the context of our online presence, as well as in the newsletters we send you. The evaluation of usage behavior includes in particular the areas of the website you visit and which links you activate there. With this data we create personalized user profiles sorted by person and/or email address, so that in the form of newsletters, website messages and print advertising, we can better adapt to your personal interests and improve our online offers.

The legal basis for the aforementioned processing is Article 6(1)(f) GDPR or, in the case of corresponding consent, Article 6(1)(a) GDPR. The processing of the data of existing customers for own advertising purposes or for advertising purposes of third parties must be understood as a legitimate interest.

Right to object

You can object to data processing for the stated purposes at any time and free of charge, separately for each communication channel and with effect for the future. An e-mail or a postal letter to the contact details listed in point 10 is sufficient.

Recipients / Categories of recipients:

As a rule, we exclude the transmission of this data to third parties.

Duration of storage / Criteria for determining the duration of storage:

If you withdraw your consent to individual advertising media or object to certain advertising media, your data will be deleted

5. Sending a newsletter

Purposes of data processing/ legal bases:

On our website we provide you with the possibility to subscribe to our newsletter. If you consent to receive our newsletter, we will use your email address and possibly your name to send (where possible, personalized) information about products, promotions, competitions and news from the offer to live streaming, branches, as well as and on customer satisfaction surveys. We will store and process this data for the purpose of sending a newsletter.

The contents of the newsletter include informative messages about our most active.

With your consent, we analyze your own usage behavior on the websites linked to our website, mobile applications, as well as our newsletters. The evaluation of usage behavior includes in particular the areas of the respective website, mobile application or newsletter that you stayed on and the links that you activated. With this information we create user profiles classified by person and/or email address, in order to better tailor your experience to your personal interests and to improve our online services.

The legal basis for data processing in the context of sending the newsletter is consent in accordance with Article 6, paragraph 1, a) GDPR.

To ensure that you did not make a mistake when entering your email address, we have established a double-opt-in process: After you have entered your email address in the prescribed field, we send you a confirmation link. Only if you choose that confirmation link will your email address be sent to our distributors.

You can withdraw your consent at any time in the future, e.g. if you unsubscribe from the newsletter through our website. You will find the link to the opt-out page at the end of each newsletter. By unsubscribing from our newsletter, your consent to the creation of a personalized user profile and to receiving the personalized newsletter is also revoked. In this case your usage data is deleted.

Recipients / categories of recipients:

If external distributors are used to carry out the sending of the newsletter, they must be contractually bound in accordance with Article 28 GDPR. Further transmission to third parties is generally excluded.

Duration of storage / criteria for determining the duration of storage:

If you withdraw your consent to receive our newsletter, your email address is "locked" from receiving the newsletter. Your data is deleted from the respective email distributors after 6 months.

6. Online presence and optimization of websites

6.1 Cookies – General instructions

On our websites we use so-called cookies based on article 6, paragraph 1, point f) GDPR. Our interest in optimizing our website must be considered as legitimate, within the meaning of the aforementioned provision. Cookies are small files, which are stored on your terminal device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause damage to your terminal device, they do not contain viruses, trojans or other harmful programs. The cookie gathers information, which results each time in relation to the specific terminal device used. This does not mean that we have direct knowledge of your identity through them. The use of cookies aims, on the one hand, to offer you a more comfortable use. For this reason, we use so-called session cookies, to recognize that you have already visited individual pages of the website. These are automatically deleted once you leave our website. In addition, we use temporary cookies for ease of use, which are stored for a specified period of time on your terminal device. If you visit our page again to use our services, we automatically recognize that you have already visited us, which entries/settings you made, so that it is not necessary to make the same actions again.

On the other hand, we use cookies to statistically analyze the use of our website in order to optimize our offer as well as display information that is specifically tailored to you. These cookies allow us to automatically recognize on a subsequent visit to our website that you have visited us again. These cookies are automatically deleted after a predetermined period of time. Most browsers automatically accept cookies. However, you can set your browser so that cookies are not stored on your computer or a hint is displayed continuously before a new cookie is stored. However, the complete deactivation of cookies may result in the inability to use some functions of our website.

You will find a summary of the cookies used with additional information (e.g. about storage duration) and the options to object in the Cookie Terms.

6.2 Google Analytics

Purposes of data processing / legal bases:
For the purpose of customizing and continuously optimizing our website, we use Google Analytics, a web analysis service from Google Inc. ("Google"). Our legitimate interest arises from the stated purposes. In this context, "pseudonymous" user profiles are created and cookies are used. The cookie records the following information about the use of this website:

    browser type/version
    operating system used
    Referrer-URL (the previous page you visited),
    Access computer hostname (IP address),
    forwarder request time.

The information is used to evaluate the use of our websites, to compile reports on website activities and to provide additional services related to the use of the website and the Internet for the purposes of market research and the configuration of said websites according to the needs. IP addresses are made anonymous so that they cannot be matched (so-called IP-masking).

You can prevent the installation of cookies through a corresponding setting of your browser program. However, we point out that in this case it may not be possible to use all the functions of this website. You can also prevent the analysis of the data generated by the cookie and concerning the use of this website (including the IP address) as well as the processing of this data by Google if you download and install this browser extension. More information about data protection in relation to Google Analytics can be found on the Google Analytics website.

Recipients / categories of recipients:

The information generated by the cookie is transmitted to a Google server in the USA and stored there. Under no circumstances will your IP address be merged with other data from Google. Also, the information in question may be transmitted to third parties if this is provided for by law or if the third parties process this data under authorization.

Duration of storage/ criteria for determining the duration of storage:

After the IP address is "anonymized" it is no longer possible to connect to your person. Data generated for statistical purposes is deleted from Google Analytics after 50 months. In the reports compiled on the basis of Google Analytics there is no longer any reference to persons.

6.3 Website Targeting and Website Optimization

Purposes of data processing / legal bases:

On our website, the information is analyzed and evaluated with the use of cookies in order to optimize our websites and the experience we offer you on them. In this way, it is ensured in particular that only advertising that is tailored to your actual or assumed interests based on your usage behavior to date will be displayed on your terminal device. The information processed for these purposes contains, for example, information about the products in which you have shown interest. The legal basis for this data processing is Article 6(1)(f) GDPR. Therefore, it is in our best interest as well as yours to optimize our websites for the best shopping experience and to avoid displaying advertisements that are not of interest to you. The analysis and evaluation is carried out exclusively under a pseudonym and does not allow us to identify you. In particular, the information is not merged with your personal data.

Recipients / categories of recipients:

Recipients of the data are the aforementioned service providers, who, based on a contract, only process your data for a specific purpose and in accordance with our instructions.

Duration of storage / criteria for determining the duration of storage:

The Cookies used and the information contained in them are stored in accordance with the Cookie Terms

7. Recipients outside the EU

    except for the processing described in point 7, we do not provide your data to recipients based outside the European Union or the European Economic Area. The processing referred to in point 7 leads to the transmission of data to the forwarders of the providers of tracking and targeting technologies authorized by us. Some forwarders are located in the USA (information about this can be obtained in the respective reports for the specific recipients). The transfer of data is carried out in accordance with the principles of the so-called Privacy Shield as well as on the basis of the so-called Standard Contractual Clauses of the European Commission.

8. Your rights as a data subject

8.1 Overview

In addition to the right to withdraw the consents you have given us, you also have the following rights, provided that the respective legal conditions exist:

    right of access regarding your personal data that we store in accordance with Article 15 GDPR,
    right to correct incorrect or incomplete data in accordance with Article 16 GDPR,
    right to delete your data stored by us in accordance with Article 17 GDPR,
    right to restrict the processing of your data in accordance with Article 18 GDPR,
    right to data portability in accordance with Article 20 GDPR,
    right to object in accordance with Article 21 GDPR.

8.2 Right of access pursuant to Article 15 GDPR

You have the right to be informed upon request and free of charge, in accordance with Article 15 paragraph 1 GDPR, about the personal data we have stored about you. This includes in particular:

    the purposes of processing personal data,
    the categories of personal data we process,
    the recipients or categories of recipients to whom the personal data concerning you is disclosed or is to be disclosed,
    if possible, the period for which the personal data will be stored or, when this is impossible, the criteria determining that period,
    the existence of a right to submit a request to the controller for correction or deletion of personal data or restriction of the processing of personal data concerning the data subject or a right to object to said processing,
    the right to lodge a complaint with a supervisory authority,
    any available information about their origin, when the personal data is not collected from the data subject,
    the existence of automated decision-making, including profiling, provided for in Article 22 paragraphs 1 and 4 GDPR and, at least in these cases, important information about the logic followed, as well as the meaning and intended consequences of said processing for the data subject.

When personal data is transferred to a third country or an international organization, the data subject has the right to be informed of the appropriate safeguards in accordance with Article 46 GDPR regarding the transfer.

8.3 Right to rectification in accordance with Article 16 GDPR

You have the right to request from us without undue delay the correction of inaccurate personal data concerning you. Bearing in mind the purposes of the processing, you have the right to request the completion of incomplete personal data, including through a supplementary statement.

8.4 Right to erasure in accordance with Article 17 GDPR

You have the right to ask us to delete personal data without undue delay if one of the following reasons applies:

    the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
    you withdraw your consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) GDPR and there is no other legal basis for the processing,
    you object to processing pursuant to Article 21(1) or (2) GDPR and there are no compelling and legitimate grounds for processing pursuant to Article 21(2) GDPR,
    the personal data was processed unlawfully,
    personal data must be deleted in order to comply with a legal obligation,
    the personal data have been collected in connection with the offer of information society services referred to in Article 8, paragraph 1 GDPR.

When we have made personal data public and are required to delete it, taking into account available technology and implementation costs, we will take reasonable steps to notify third parties that processing your personal data that you require and have asked them to delete any links to that data or copies or reproductions of said personal data.

8.5 Right to restriction of processing in accordance with Article 18 GDPR

You have the right to ask us to restrict processing when one of the following conditions applies:

    you dispute the accuracy of personal data,
    the processing is illegal and you request the restriction of the use of the personal data instead of deletion,
    the controller no longer needs the personal data for the purposes of the processing, but such data is required by the data subject to establish, exercise or support legal claims,
    or you object to processing pursuant to Article 21(1) GDPR, pending verification of whether the legitimate grounds of the controller prevail over those of the data subject.

8.6 Right to data portability in accordance with Article 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, as well as the right to transmit said data to another controller without objection from us; when:

    the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) GDPR and
    the processing is carried out by automated means.

When exercising the right to data portability, you have the right to request that your personal data be transferred directly from us to another controller, if this is technically possible.

8.7 Right to object in accordance with Article 21 GDPR

Under the conditions of Article 21, paragraph 1 GDPR you can object to data processing for other reasons arising from the specificity of the situation.

The above general right to object applies to all data processing purposes described in these data protection terms, where the data is processed pursuant to Article 6(1)(f) GDPR. In contrast to the specific right to object regarding the processing of data for advertising purposes (cf. above, in particular points 9 and 7.5), we are obliged under the GDPR to apply this general right to object only if you tell us overriding reasons, e.g. h. a potential danger to life or health. In addition, you can contact the competent supervisory authority or the data protection officer of the website.

9. Contact persons

9.1 Contact persons for inquiries or regarding the exercise of your data protection rights

For questions about the website or the exercise of your rights when processing your data (data protection rights) you can send to the address:

https://site_sit1/contact.php

9.2 Contact person for data protection questions

If you have further questions about the processing of your data, you can contact the data protection officer through the controller.

9.3 Right of complaint to the data protection supervisory authority

In addition, you have the right to lodge a complaint with the competent data protection supervisory authority at any time. You can contact the data protection supervisory authority, in particular the Member State in which you have your usual residence or place of work or the place of the alleged infringement or the authority of the State in which the controller is established.

10. Name and contact details of the data controller as well as contact details of the data protection officer

You can contact the data protection officer of the website at:

site_site,
site_sit2,
site_sit3, site_sit4,
("Data Processing Officer") for the website site_site,

or at e-mail: dpo@site_sit1.