Data protection declaration
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data in this context is any data that can be used to personally identify you.
1.2 The data controller for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ursula Rohde, ROHDE+ROHDE Ursula Rohde, David-Gilly-Straße 1, 14469 Potsdam, Germany, Tel.: +4933195136212, E-Mail: info@design-lichtschalter.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when you visit our website
2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the person responsible). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.
3) Hosting & content delivery network
We use a provider to host our website and display the page content, who provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
4) Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted again after you close the browser (so-called "session cookies"), while others remain on your end device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage duration from the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies that we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either to fulfil the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of consent having been given or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can set your browser to inform you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
When you contact us (e.g. via the contact form or by email), personal data is processed – exclusively for the purpose of processing and answering your request and only to the extent necessary for this.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be assumed from the circumstances that the matter in question has been conclusively resolved and provided that there are no legal obligations to retain the data.
6) Comment function
When you use the comment function on this website, in addition to your comment, information about the time the comment was created and the name you chose for the comment will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you if a third party should object to your published content as being unlawful.
The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.
7) Data processing when opening a customer account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide us with this information when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website.
You can delete your customer account at any time by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded in this regard have been fully settled, there are no legal retention periods to the contrary and we have no legitimate interest in continuing to store the data.
8) Use of customer data for direct marketing
Signing up for our e-mail newsletter
If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further information is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address as registered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
9) Data processing for order processing
On our website, we offer customers the option of personalising products by sending us image files by email. The submitted image is used as a template for personalising the selected product.
The customer can send us one or more image files from the memory of the end device used via the e-mail address provided on the website. We then record, store and use the files sent in this way exclusively for the purpose of producing the personalised product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the purpose of producing and processing the order, you will be explicitly informed of this in the following paragraphs. No further transmission will take place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.
After the order has been completed, the transmitted image files will be automatically and completely deleted.
9.2 Insofar as it is necessary for the fulfilment of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when placing the order (name, address, e-mail address) in order to inform you personally about upcoming updates within the legally prescribed period in accordance with our statutory information obligations in accordance with Art. 6 para. 1 lit. c GDPR, we will use the contact details you provided when placing your order (name, address, email address) to personally inform you about upcoming updates in the legally prescribed period by a suitable means of communication (e.g. by post or email). Your contact details will be used strictly for the purpose of sending you information about updates that we are obliged to provide and will only be processed by us for this purpose to the extent necessary for the respective information.
In order to process your order, we also work with the following service provider(s), who support us in the execution of contracts concluded with you, either in whole or in part. Certain personal data is transferred to these service providers in accordance with the following information.
9.3 In order to fulfil our contractual obligations to our customers, we work with external shipping partners. We will pass on your name, delivery address and, if necessary for the delivery, your telephone number, exclusively for the purpose of delivering the goods, to a shipping partner selected by us, in accordance with Art. 6 Para. 1 lit. b GDPR.
9.4 Transfer of personal data to shipping service providers - Deutsche Post
We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We will forward your e-mail address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or for the delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the supplier or to notify the supplier of the delivery in advance.
Consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the provider. - DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We will forward your e-mail address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of arranging a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the supplier or to notify the supplier of the delivery in advance.
Consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the provider.
9.5 Use of payment service providers (payment services) - Mollie
This website offers one or more online payment methods from the following provider: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands
If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
- Paypal
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method from the provider that requires you to pay in advance, the payment data you provide during the order process (including your name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is only passed on for the purpose of payment processing with the provider and only to the extent necessary for this.
If you select a payment method in which we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, and, if applicable, data on an alternative means of payment) during the order process.
In order to safeguard our legitimate interest in establishing your solvency in such cases, we will forward this data to the provider in accordance with Art. 6 Para. 1 lit. f GDPR for the purpose of a credit check. The provider will use the personal data you have provided, as well as other data (such as shopping basket, invoice amount, order history, payment experiences), to determine whether the payment method you have selected can be granted in view of the risks of non-payment and/or default.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values.
You can object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
10) Web analysis services 10.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.
By default, Google Analytics 4 does not use cookies when you visit the website, unless you explicitly agree to cookies. Instead, information about your usage behaviour is collected and processed by so-called pings (small data packets that are sent to the host of a terminal device). This information also includes your IP address, which Google truncates by removing the last few digits to prevent it from being directly linked to you.
The information is transferred to Google servers and processed there. It is also possible that the information is transferred to Google LLC, which is based in the USA.
Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser and shortened as part of Google Analytics will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All the processing described above, including the transmission of data by "pings" and the possible setting of Google Analytics cookies, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can use it to create statistics that provide information about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.
Google Signals
UserIDs
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.2 Google Tag Manager
This website uses the "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and linking them to conditions via a uniform user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not perform any independent data analyses. However, when you visit a page, your IP address is transmitted to Google and may be stored there. It is also possible that it is transmitted to servers of Google LLC. in the USA.
This processing will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Tag Manager will be omitted during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.3 PayPal Marketing Solutions
r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
The service uses cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information) to collect and store pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to analyse it for statistical purposes and to create pseudonymised user profiles. This makes it possible, among other things, to analyse movement patterns (so-called heat maps) that show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally excludes the possibility of direct personal identification. Your personal data collected in other ways will not be merged with this data.
All the processing described above, in particular the reading or storage of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
11) Retargeting/ remarketing and conversion tracking 11.1 Google Ads conversion tracking
This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use Google Ads to draw attention to our attractive offers on external websites using advertising media (so-called Google Adwords). We can use the data from the advertising campaigns to determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.
When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details of the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently opt out of Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships in a more targeted manner, we use a customer matching function within the scope of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (mainly email addresses and telephone numbers) to Google electronically. Google does not have access to the clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then only use the encrypted information to assign it to existing Google accounts that the data subjects have set up. This enables personalised advertising to be displayed across all Google services linked to the respective Google account.
Customer data is only transferred to Google if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google- ads/answer/6334160?hl=de&ref_topic=10550182
Google's data protection provisions can be viewed here: https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.2 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to avoid showing the same ads to the same user multiple times. Google uses a cookie ID to record which ads are served in which browser and can thus prevent them from being displayed multiple times. In addition, GMP can use cookie IDs to track conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and makes a purchase through that website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server.
We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows, based on our current knowledge: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will learn and store your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
The data protection provisions of GMP by Google can be found here: https://www.google.de/policies/privacy/
12) Site functionality 12.1 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, to create playback statistics and to prevent abusive behaviour.
If you are logged into a user account with the provider while visiting the website, your data will be assigned directly to your account when you click on a video. If you do not want your data to be assigned to your account, you must log out before clicking on the playback button.
All of the aforementioned processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke the consent you have given at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
12.2 ShopVote graphics
Our website displays external customer reviews and/or an externally awarded quality mark using graphic elements from the following provider: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany
When you visit a page on our website that contains such graphic elements, your browser will establish a direct connection to the provider's servers in order to load the elements correctly. In doing so, certain browser information, including your IP address, will be transmitted to the provider.
If personal data is also processed in this process, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in optimising the marketing of our offer and the appealing design of our website.
12.3 Google reCAPTCHA
Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. The provider uses "Google Fonts", i.e. fonts downloaded from the internet by Google, for the visual design of the Captcha window. No further information is processed here other than the above-mentioned information, which is already transferred to Google via the ReCaptcha functionality.
The service checks whether an entry is made by a natural person or is made in an abusive manner by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is being carried out by a human and not by an automated bot, the provider collects the IP address of the end device used, the identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this information to the provider's servers for evaluation.
The legal basis for this is our legitimate interest in determining individual responsibility on the internet and avoiding misuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
13) Tools and other 13.1 - Lexoffice
We use the cloud-based accounting software service of the following provider to handle our accounting: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany
The provider processes incoming and outgoing invoices and, if applicable, our company's bank transactions in order to automatically record invoices, match them to transactions and use them to create financial accounting in a partially automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business processes.
13.2 Cookie consent tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the site in the form of an interactive user interface, where they can give their consent to certain cookies and/or cookie-based applications by ticking a box. When the tool is used, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the box. This ensures that such cookies are only set on the respective user's end device if consent has been granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
Further information on the operator and the settings options for the cookie consent tool can be found directly in the corresponding user interface on our website.
14) Rights of the data subject
14.1 The applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the legal basis cited for the respective conditions for exercising these rights:
- Right of access in accordance with Art. 15 GDPR;
14.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME THE RIGHT TO OBJECT TO THIS PROCESSING IN THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS , FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
15) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data that is processed in the context of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfilment or initiation of the contract and/or we have no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right of objection under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right of objection in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data in this context is any data that can be used to personally identify you.
1.2 The data controller for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ursula Rohde, ROHDE+ROHDE Ursula Rohde, David-Gilly-Straße 1, 14469 Potsdam, Germany, Tel.: +4933195136212, E-Mail: info@design-lichtschalter.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when you visit our website
2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website you visited
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or requests to the person responsible). You can recognise an encrypted connection by the character string "https://" and the lock symbol in your browser line.
3) Hosting & content delivery network
We use a provider to host our website and display the page content, who provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
4) Cookies
In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted again after you close the browser (so-called "session cookies"), while others remain on your end device for longer and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage duration from the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies that we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either to fulfil the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of consent having been given or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.
You can set your browser to inform you when cookies are set and to decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
When you contact us (e.g. via the contact form or by email), personal data is processed – exclusively for the purpose of processing and answering your request and only to the extent necessary for this.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be assumed from the circumstances that the matter in question has been conclusively resolved and provided that there are no legal obligations to retain the data.
6) Comment function
When you use the comment function on this website, in addition to your comment, information about the time the comment was created and the name you chose for the comment will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned violates the rights of third parties or posts illegal content through a comment. We need your email address to contact you if a third party should object to your published content as being unlawful.
The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.
7) Data processing when opening a customer account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide us with this information when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website.
You can delete your customer account at any time by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded in this regard have been fully settled, there are no legal retention periods to the contrary and we have no legitimate interest in continuing to store the data.
8) Use of customer data for direct marketing
Signing up for our e-mail newsletter
If you register for our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further information is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address as registered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter will be used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
9) Data processing for order processing
On our website, we offer customers the option of personalising products by sending us image files by email. The submitted image is used as a template for personalising the selected product.
The customer can send us one or more image files from the memory of the end device used via the e-mail address provided on the website. We then record, store and use the files sent in this way exclusively for the purpose of producing the personalised product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the purpose of producing and processing the order, you will be explicitly informed of this in the following paragraphs. No further transmission will take place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.
After the order has been completed, the transmitted image files will be automatically and completely deleted.
9.2 Insofar as it is necessary for the fulfilment of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when placing the order (name, address, e-mail address) in order to inform you personally about upcoming updates within the legally prescribed period in accordance with our statutory information obligations in accordance with Art. 6 para. 1 lit. c GDPR, we will use the contact details you provided when placing your order (name, address, email address) to personally inform you about upcoming updates in the legally prescribed period by a suitable means of communication (e.g. by post or email). Your contact details will be used strictly for the purpose of sending you information about updates that we are obliged to provide and will only be processed by us for this purpose to the extent necessary for the respective information.
In order to process your order, we also work with the following service provider(s), who support us in the execution of contracts concluded with you, either in whole or in part. Certain personal data is transferred to these service providers in accordance with the following information.
9.3 In order to fulfil our contractual obligations to our customers, we work with external shipping partners. We will pass on your name, delivery address and, if necessary for the delivery, your telephone number, exclusively for the purpose of delivering the goods, to a shipping partner selected by us, in accordance with Art. 6 Para. 1 lit. b GDPR.
9.4 Transfer of personal data to shipping service providers - Deutsche Post
We use the following provider as a transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We will forward your e-mail address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or for the delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the supplier or to notify the supplier of the delivery in advance.
Consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the provider. - DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We will forward your e-mail address and/or telephone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of arranging a delivery date or to notify the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the supplier or to notify the supplier of the delivery in advance.
Consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned controller or vis-à-vis the provider.
9.5 Use of payment service providers (payment services) - Mollie
This website offers one or more online payment methods from the following provider: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands
If you choose a payment method from the provider that requires you to pay in advance (e.g. credit card payment), the payment data you provide during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
- Paypal
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method from the provider that requires you to pay in advance, the payment data you provide during the order process (including your name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be passed on to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is only passed on for the purpose of payment processing with the provider and only to the extent necessary for this.
If you select a payment method in which we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, and, if applicable, data on an alternative means of payment) during the order process.
In order to safeguard our legitimate interest in establishing your solvency in such cases, we will forward this data to the provider in accordance with Art. 6 Para. 1 lit. f GDPR for the purpose of a credit check. The provider will use the personal data you have provided, as well as other data (such as shopping basket, invoice amount, order history, payment experiences), to determine whether the payment method you have selected can be granted in view of the risks of non-payment and/or default.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, but not exclusively, are included in the calculation of the score values.
You can object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
10) Web analysis services 10.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.
By default, Google Analytics 4 does not use cookies when you visit the website, unless you explicitly agree to cookies. Instead, information about your usage behaviour is collected and processed by so-called pings (small data packets that are sent to the host of a terminal device). This information also includes your IP address, which Google truncates by removing the last few digits to prevent it from being directly linked to you.
The information is transferred to Google servers and processed there. It is also possible that the information is transferred to Google LLC, which is based in the USA.
Google uses the information collected on our behalf to analyse your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The IP address transmitted by your browser and shortened as part of Google Analytics will not be merged with other Google data. The data collected in the context of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All the processing described above, including the transmission of data by "pings" and the possible setting of Google Analytics cookies, will only take place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to our website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google Analytics 4 uses the special function "demographic characteristics" and can use it to create statistics that provide information about the age, gender and interests of site visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.
Google Signals
UserIDs
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.2 Google Tag Manager
This website uses the "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling and linking them to conditions via a uniform user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not perform any independent data analyses. However, when you visit a page, your IP address is transmitted to Google and may be stored there. It is also possible that it is transmitted to servers of Google LLC. in the USA.
This processing will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Tag Manager will be omitted during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.3 PayPal Marketing Solutions
r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
The service uses cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information) to collect and store pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to analyse it for statistical purposes and to create pseudonymised user profiles. This makes it possible, among other things, to analyse movement patterns (so-called heat maps) that show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally excludes the possibility of direct personal identification. Your personal data collected in other ways will not be merged with this data.
All the processing described above, in particular the reading or storage of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
11) Retargeting/ remarketing and conversion tracking 11.1 Google Ads conversion tracking
This website uses the online advertising programme "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use Google Ads to draw attention to our attractive offers on external websites using advertising media (so-called Google Adwords). We can use the data from the advertising campaigns to determine how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and has been redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed of the total number of users who have clicked on their ad and been redirected to a page with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.
When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details of the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently opt out of Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships in a more targeted manner, we use a customer matching function within the scope of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (mainly email addresses and telephone numbers) to Google electronically. Google does not have access to the clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then only use the encrypted information to assign it to existing Google accounts that the data subjects have set up. This enables personalised advertising to be displayed across all Google services linked to the respective Google account.
Customer data is only transferred to Google if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google- ads/answer/6334160?hl=de&ref_topic=10550182
Google's data protection provisions can be viewed here: https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.2 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports or to avoid showing the same ads to the same user multiple times. Google uses a cookie ID to record which ads are served in which browser and can thus prevent them from being displayed multiple times. In addition, GMP can use cookie IDs to track conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and makes a purchase through that website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server.
We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows, based on our current knowledge: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will learn and store your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
The data protection provisions of GMP by Google can be found here: https://www.google.de/policies/privacy/
12) Site functionality 12.1 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behaviour, to create playback statistics and to prevent abusive behaviour.
If you are logged into a user account with the provider while visiting the website, your data will be assigned directly to your account when you click on a video. If you do not want your data to be assigned to your account, you must log out before clicking on the playback button.
All of the aforementioned processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke the consent you have given at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
12.2 ShopVote graphics
Our website displays external customer reviews and/or an externally awarded quality mark using graphic elements from the following provider: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany
When you visit a page on our website that contains such graphic elements, your browser will establish a direct connection to the provider's servers in order to load the elements correctly. In doing so, certain browser information, including your IP address, will be transmitted to the provider.
If personal data is also processed in this process, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in optimising the marketing of our offer and the appealing design of our website.
12.3 Google reCAPTCHA
Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. The provider uses "Google Fonts", i.e. fonts downloaded from the internet by Google, for the visual design of the Captcha window. No further information is processed here other than the above-mentioned information, which is already transferred to Google via the ReCaptcha functionality.
The service checks whether an entry is made by a natural person or is made in an abusive manner by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is being carried out by a human and not by an automated bot, the provider collects the IP address of the end device used, the identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this information to the provider's servers for evaluation.
The legal basis for this is our legitimate interest in determining individual responsibility on the internet and avoiding misuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
13) Tools and other 13.1 - Lexoffice
We use the cloud-based accounting software service of the following provider to handle our accounting: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany
The provider processes incoming and outgoing invoices and, if applicable, our company's bank transactions in order to automatically record invoices, match them to transactions and use them to create financial accounting in a partially automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business processes.
13.2 Cookie consent tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users when they visit the site in the form of an interactive user interface, where they can give their consent to certain cookies and/or cookie-based applications by ticking a box. When the tool is used, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by ticking the box. This ensures that such cookies are only set on the respective user's end device if consent has been granted.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this process.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
Further information on the operator and the settings options for the cookie consent tool can be found directly in the corresponding user interface on our website.
14) Rights of the data subject
14.1 The applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the legal basis cited for the respective conditions for exercising these rights:
- Right of access in accordance with Art. 15 GDPR;
14.2 RIGHT OF OBJECTION
IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME THE RIGHT TO OBJECT TO THIS PROCESSING IN THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING THAT OUTWEIGH YOUR INTERESTS , FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
15) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data that is processed in the context of legal or similar obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will routinely deleted after the retention periods have expired, provided that they are no longer required for the fulfilment or initiation of the contract and/or we have no legitimate interest in further storage.
When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right of objection under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
When personal data is processed for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right of objection in accordance with Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
03072024