We are very pleased that you are interested in our company. Data protection is particularly important to the management of Bali Woodland. The Bali Woodland website can be used without any personal data. However, if a data subject wants to use special company services via our website, processing of personal data could become necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the person concerned.

The processing of personal data, such as the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to Bali Kitchen. By means of this data protection declaration, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed about their rights by means of this data protection declaration.

Data protection

1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for the data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Philipp Wolff, Ostendorpstr. 43, 28203, Germany, Tel. : 4915256602500 E-Mail: philipp@bali-woodland.com. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1In addition, this cookie collects specific customer data such as the e-mail address that we collect on our website linked to the Facebook ad for transactions such as purchases, account registrations or registrations (extended data comparison). "Server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if necessary: in anonymous form)

The processing takes place in accordance with Art. 6 Abs. 1 bed. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

3) Hosting & Content-Delivery-Network

Shopify

We use the system of the following provider to host our website and display the page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.

All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

In the case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called. "Session cookies"), some of these cookies remain on your end device for a longer period of time and enable you to save page settings (so-called cookies). "persistent Cookies"). In the latter case, you can find the storage period in the overview of the cookie settings in your web browser.

If individual cookies used by us also process personal data, the processing takes place in accordance with Art. 6 Abs. 1 bed. b GDPR either for the execution of the contract, in accordance with Art. 6 Abs. 1 bed. a DSGVO in the case of a given consent or according to Art. 6 Abs. 1 bed. f GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contact

When contacting us (e.g. via contact form or e-mail), personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent required for this.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Abs. 1 bed. f DSGVO. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 Abs. 1 bed. b DSGVO. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

6) Data processing when opening a customer account

According to Art. 6 Abs. 1 bed. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the relevant form on our website.

A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded have been completed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.

7) Use of Customer Data for Direct Marketing

7.1 Subscription to our email newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to be able to address you personally. For sending the newsletter we use the so-called Double opt-in procedure that ensures that you only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 Abs. 1 bed. and DSGVO. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data we collect when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

7.2 Product availability notification via email

For items that are temporarily unavailable, you can opt-in to receive email notifications of stock availability. We will send you a one-time email message about the availability of the item you have selected. The only mandatory information for sending this notification is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called Double opt-in procedure that ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 Abs. 1 bed. and DSGVO. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our email notification service for the availability of goods is used strictly for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration .

7.4Shopping cart reminders by email

If you cancel your purchase from us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart once by e-mail.

The only mandatory information for sending this reminder is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called Double opt-in procedure that ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 Abs. 1 bed. a DSGVO for sending a shopping cart reminder. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data we collect when you register for our e-mail notification service is used strictly for the intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending a message to the person named above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration .

8) Data processing for order processing

8.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us in accordance with Art. 6 Abs. 1 bed. b GDPR passed on to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provide when ordering (name, address, e-mail address) in order to inform you within the framework of our legal information obligations in accordance with Art. 6 Abs. 1 bed. c GDPR via a suitable communication channel (e.g. by post or e-mail) about upcoming updates in the legally stipulated period. Your contact details will be used strictly earmarked for notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the information in question.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.3 Disclosure of personal data to shipping service providers

- DHL

We use the following provider as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We provide your e-mail address and/or telephone number in accordance with Art. 6 Abs. 1 bed. a DSGVO before the delivery of the goods for the purpose of coordinating a delivery date or to the provider for delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 Abs. 1 bed. b GDPR, only the name of the recipient and the delivery address are passed on to the provider. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or supplier is required. the delivery notice is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned person responsible or vis-à-vis the provider.

8.4 Use of payment service providers (payment services)

- Apple Pay

If you decide to use the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed using the "Apple Pay" function of your device running iOS, watchOS or macOS by debiting a payment card stored with "Apple Pay". Apple Pay uses security features built into your device's hardware and software to protect your transactions. In order to release a payment, it is therefore necessary to enter a code previously defined by you and to verify it using the "Face ID" or "Touch ID" function of your device.

For the purpose of payment processing, the information you provide during the ordering process, along with the information about your order, will be sent to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is sent to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment details. After payment is made, Apple will send your device account number and a transaction-specific dynamic security code to the originating website to confirm payment success.

If personal data is processed in the transmissions described, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Abs. 1 bed. b DSGVO.

Apple retains anonymized transaction information, including approximate purchase amount, date and time, and whether the transaction was successfully completed. The anonymization completely excludes any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that personally identifies you. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay" and turn off "Allow payments on Mac".

For more information on Apple Pay privacy, please visit the following Internet address:https://support.apple.comhttps://support.apple.com/ de-de/HT203027
- Google Pay

If you decide to use the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment will be processed using the “Google Pay” application on your device with at least Android 4.4 ("KitKat") operated mobile device with an NFC function by debiting a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). To release a payment via Google Pay of more than €25, you must first unlock your mobile device using the verification measure set up (e.g. face recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information you provide during the ordering process together with the information about your order will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the source website, which is used to verify that the payment has been made. This transaction number does not contain any information about the real payment data of your means of payment stored with Google Pay, but is created and transmitted as a uniquely valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment process. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment stored with Google Pay.

If personal data is processed in the transmissions described, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Abs. 1 bed. b DSGVO.

Google reserves the right to collect, store and evaluate certain process-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description provided by the merchant of the goods or services purchased, photographs you included with the transaction, the name and email addresses of the seller and buyer, or of the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.

According to Google, this processing takes place exclusively in accordance with Art. 6 Abs.1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimization and functional maintenance of the Google Pay service.

Google also reserves the right to merge the processed transaction data with other information that is collected and stored by Google when using other Google services.

The Google Pay Terms of Use can be found here:

https://payments.google.com/payments/apis-secure/in/0/get_legal_document?ldo=0&ldt=googlepaytos& Ldl = of
Further information on data protection with Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice& Ldl = of
- Paypal

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

Further information on Google's data protection measures with regard to the customer comparison function can be found here: [012750] [012751] [0127512] [012735] 6 Abs. 1 bed. b DSGVO passed on. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.

If you choose a payment method for which we will make an advance payment, you will also be asked in the order process to provide certain personal data (first and last name, street, house number, postcode, place, date of birth, e-mail address, telephone number, if applicable. information about an alternative means of payment).

Um in solchen Fällen unser berechtigtes Interesse an der Feststellung Ihrer Zahlungsfähigkeit zu wahren, werden diese Daten von uns gemäß Art. 6 Abs. 1 bed. F GDPR forwarded to the provider for the purpose of a credit check. Based on the personal data you provide and other data (e.g. shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks.

The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain continues to be entitled to process your personal data if this is necessary for contractual payment processing.
- Paypal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), further. The transfer takes place in accordance with Art. 6 Abs. 1 bed. b GDPR and only to the extent that this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal. For this purpose, your payment data may be processed in accordance with Art. 6 Abs. 1 bed. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency to credit agencies. PayPal uses the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain continues to be entitled to process your personal data if this is necessary for contractual payment processing.

If you select the PayPal payment method "purchase on account", your payment data will first be sent to PayPal to prepare the payment, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis is Art. 6 Abs. 1 bed. b DSGVO. In this case, RatePay carries out an identity and credit check on its own behalf to determine solvency in accordance with the principle already mentioned and gives your payment data due to the legitimate interest in determining solvency in accordance with Art. 6 Abs. 1 bed. f GDPR to credit agencies. A list of credit agencies that Ratepay can fall back on can be found here:https://www.ratepay.com/legal-payment-creditagencies/

When using the payment method of a local third-party provider, your payment data will initially be processed in accordance with Art. 6 Abs. 1 bed. b DSGVO forwarded to PayPal. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to carry out the payment in accordance with Art. 6 Abs. 1 bed. b GDPR to the relevant provider:
- Immediately (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brüssel, Belgium)
-Blik (Polish Standard P & lstrok;atno & sacute;ci sp. z o.o., ul. Czerniakowska 87A, 00-718 Warschau, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclersk 15A, 60-326 Poznań, Polen)
For further data protection information, please refer to PayPal's privacy policy:https://www.paypal.com/from/ webapps/mpp/ do/privacy-full
- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: [012750] [012751] [012757] [012734] 6 Abs. 1 bed. b DSGVO passed on. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.
- RIGHT AWAY

One or more online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: [012750] [012751] [012757] [012734] 6 Abs. 1 bed. b DSGVO passed on. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.

9) Web Analytics Services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

In order to ensure that an action is carried out by a human being and not by an automated bot, the provider collects the IP address of the end device used, recognition data of the browser and operating system type used, as well as the date and duration of the visit and transmits these to the server of the provider for evaluation. The scope of this information also includes your IP address, which, however, is shortened by the last digits by Google in order to exclude direct personal reference.

The information is transmitted to Google servers and processed there. It is also possible to transfer data to Google LLC based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be stored for a period of two months and then deleted.

However, the revocation does not affect the data that has already been transferred to the provider. Art. 6 Abs. 1 bed. a DSGVO have granted.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. These plugins allow direct interactions with content on the social network.

We have concluded an order processing agreement with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For the transfer of data to the USA, Google refers to standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
For further legal notice on Google Analytics 4 including a copy of the above-mentioned standard contractual clauses, seehttps://policies.google.com/privacy? hl = de& Gl = deAnd underhttps://policies.google.com/technologies/partner-sites

Demographics
After receipt of the application by e-mail, the data will only be stored and evaluated for the purpose of application processing. This is done by analyzing third-party advertising and information. This makes it possible to identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted for a period of two months after storage.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google may, subject to your consent, use Google Analytics in accordance with Art. Art. 6 Abs. 1 bed. a GDPR analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google Account settings. To do this, follow the instructions on this page:https://support.google.com/ads/answer/2662922? Hl = deFor more information about Google Signals, see the following link:https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you are interested in the use of Google Analytics 4 acc. Art. 6 Abs. 1 bed. a GDPR, have created an account on this website and log in with this account on different devices, your activities, including conversions, may be analyzed across devices.

 

10) Retargeting/ Remarketing and Conversion Tracking

Facebook pixel to create custom audiences

Within our online offering, we use the "Facebook Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook")

If a user clicks on an advertisement placed by us on Facebook, the URL of our linked page is extended by a parameter with the help of "Facebook Pixel". After forwarding, this URL parameter is then entered into the user's browser by a cookie that our linked page sets itself.

On the one hand, this enables Facebook to attract visitors to our online offer as a target group for the presentation of advertisements (so-called "Facebook Ads"). Accordingly, we use the service to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products, which are determined on the basis of the websites visited be shown), which we transmit to Facebook (so-called. „Custom Audiences“).

On the other hand, “Facebook Pixel” can be used to understand whether users were redirected to our website after clicking on a Facebook advertisement and which execution actions they are doing there (so-called „Conversion-Tracking“).

The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes.

All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you inform us in accordance with Art. 6 Abs. 1 bed. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; in this context, data may also be transmitted to Meta Platforms Inc. servers in the USA.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11) Site Functionalities

11.1 Google Web Fonts

This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have informed us in accordance with Art. 6 Abs. 1 bed. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11.2 Typeform

To conduct surveys or online forms, we use the services of the following provider: TYPEFORM SL Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain

The provider enables us to design and evaluate surveys and online forms. In addition to the respective personal data that you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address are also collected, transmitted to the provider and stored on the provider's servers.

The storage of the information you enter into the forms is password-protected to ensure that third-party access is excluded and that only we can evaluate the data for the purpose stated in the form.

When processing personal data that is necessary to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6 Abs. 1 bed. b GDPR as the legal basis. If you have given us your consent to the processing of your data, the processing will take place on the basis of Art. 6 Abs. 1 bed. and DSGVO. A given consent can be revoked at any time with effect for the future.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

12) Tools and Miscellaneous

Cookie-Consent-Tool

This website uses a so-called. „Cookie-Consent-Tool“. The "Cookie-Consent-Tool" is displayed to users when the page is accessed in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking the box. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed here.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this takes place in accordance with Art. 6 Abs. 1 bed. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Another legal basis for processing is Art. 6 Abs. 1 bed. c DSGVO. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information on the operator and the setting options of the cookie content tool can be found directly in the corresponding user interface on our website.

13) Rights of the data subject

13.1The applicable data protection law grants you the following data subject rights (rights to information and intervention rights) vis-à-vis the person responsible for the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:

• Right to information according to Art. 15 GDPR;
• Right to rectification according to Art. 16 GDPR;
• Right to erasure according to Art. 17 GDPR;
• Right to restriction of processing in accordance with Art. 18 GDPR;
• Right to information according to Art. 19 GDPR;
• Right to data portability according to Art. 20 GDPR;
• Right to revoke granted consent in accordance with Art. 7 Abs. 3 GDPR;
• Right to complain according to Art. 77 GDPR.

13.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS IN OUR PREVIOUS LEGITIMATE INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE CERTIFICATION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of an express consent in accordance with Art. 6 Abs. 1 bed. a DSGVO, the data concerned will be stored until you revoke your consent.

Are there legal retention periods for data that are collected within the framework of legal transactions or obligations similar to legal transactions on the basis of Art. 6 Abs. 1 bed. b GDPR are processed, these data are routinely deleted after the retention periods have expired, provided they are no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 Abs. 1 bed. f GDPR, this data will be stored until you have exercised your right of objection in accordance with Art. 21 Abs. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 Abs. 1 bed. f GDPR, this data will be stored until you have exercised your right of objection in accordance with Art. 21 Abs. 2 GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.