Privacy policy
Data controller
Santaverde GmbH
Borsteler Bogen 27B
22453 Hamburg
Germany
info@santaverde.de
Thank you for visiting our online shop. Your privacy is our top priority. This Privacy Statement covers the collection, use and disclosure of your personal data.
Access data and hosting
You can generally use our website without providing us with any personal information. Our web server automatically records your visit and receives a log file containing certain data about the computer or device you are using when you visit this site including:
e.g. the name of the requested file; your Internet Protocol (IP) address; the date and time of your visit; the transferred data volume; the requesting provider (access data). We solely analyse this access data to prevent disruptions to site operations and to improve our services. This analysis protects our legitimate interest in the accurate presentation of our services as per Art. 6(1) sentence 1, lit. f GDPR. All access data will be deleted within seven days after the end of your visit to our site.
Hosting
In certain cases, we appoint service providers to host and display our site on our behalf. In the absence of any terms to this contrary in this Privacy Statement, all access data, including all data collected in the forms provided on this site, is processed on the servers operated by these service providers. If you have any queries related to the service providers and the terms of our collaboration with them, we ask you to contact us using the contact information provided in this Privacy Statement.
Our service providers are situated in and/or use servers located in the USA and other countries not within the EU or EEA. Data transfers to these countries are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaborations with our service providers are governed by the Standard Contractual Clauses (SCC) issued by the EU commission.
Our service providers are situated in and/or use servers located in the following countries for which the EU commission has granted an adequacy decision to verify an adequate level of data protection: Canada.
Data processing to perform contracts, contact you and open a customer account
We collect personal data that is voluntarily disclosed to us when you place an order or contact us (e.g. using the contact form or by email).
Required fields are marked as mandatory. We require the data from these fields to perform contracts and process your queries. If you do not provide us with this information, you will be unable to send your order or query. You can see which data is collected in the respective contact form. We use the data provided by you to perform contracts and process your queries in accordance with Art. 6(1) sentence 1, lit. b GDPR.
If you have granted us your consent to process your data as per Art. 6(1) sentence 1, lit. a GDPR to open a customer account, we will use your data for the purpose of opening your account. You can learn more about how we process your data, in particular with regard to disclosure to our service providers for order, payment and shipment processing, in the following sections of this Privacy Statement. Upon completion of the contract or deletion of your customer account, further processing of your data will be restricted, and your data will be deleted following the expiration of statutory retention periods under commercial and fiscal law as per Art. 6(1) sentence 1, lit. c GDPR, provided you have not granted your consent to further use of your data as per Art. 6(1) sentence 1, lit. a GDPR, or we reserve the right to continue using your data as permitted according to the pertinent regulations and mentioned in this Privacy Statement. You can delete your customer account at any time either by sending us a notification using the contact information provided in this Privacy Statement or by using the corresponding feature in your customer account.
Enterprise Resource Planning (ERP) system
We use ERP systems from third-party service providers to process orders and contracts. Our service providers perform data processing services on our behalf. If you have any queries related to the service providers and the terms of our collaboration with them, we ask you to contact us using the contact information provided in this Privacy Statement.
Data processing for the purpose of delivering goods
In order to perform our contract with you as per Art. 6(1) sentence 1, lit. b GDPR, we disclose your data to shipping providers appointed to deliver your goods where required to deliver the ordered goods.
Data processing to process payments
We work with the following partners to process payments in our online shop: technical service providers, credit institutions, payment service providers.
Data processing to process transactions
Depending on the selected payment method, we may disclose data required to process payment transactions to our technical service providers appointed to assist us with order processing, or to appointed credit institutions, or the selected payment service provider, where required to process your payment. This data processing is required for us to perform contracts as per Art. 6(1) sentence 1, lit. b GDPR. In certain cases, payment service providers collect data required to process payments themselves, e.g. on their website or through a technical integration during the order process. The privacy statement for the respective payment service provider shall apply in the above case.
If you have any queries related to our payment service partners and the terms of our collaboration with them, we ask you to contact us using the contact information provided in this Privacy Statement.
Data processing to prevent fraud and optimise our payment processes
We also provide our service providers with additional data used in combination with data required to process your payment within the context of their appointment as our data processors to prevent fraud and optimise our payment processes (e.g. invoice generation, processing of contested payments, accounting support). This disclosure protects our compelling legitimate interest in safeguarding our services against fraud and offering efficient payment management as per Art. 6(1) sentence 1, lit. f GDPR.
Identity and credit checks for Klarna payment services
Klarna direct debit, pay by invoice with Klarna, pay in instalments with Klarna
If you opt to use payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter Klarna), we will seek your consent to transfer the data required to process your payment and complete an identity and credit check to Klarna as per Art. 6(1) sentence 1, lit. a GDPR. In Germany, the credit rating agencies specified in Klarna’s Privacy Statement may be used for the identity and credit checks. Information received on the statistical likelihood of non-payment is used by Klarna to make a balanced decision on the establishment, performance or termination of the contractual relationship. You can withdraw your consent to this use of your data at any time by sending a notification to the contact information specified in this Privacy Statement. If you withdraw your consent, we may no longer be able to offer certain payment methods. You can also withdraw your consent to this use of your personal data at any time by contacting Klarna.
Hire purchases
If you select the hire purchase payment method and grant your consent to the required processing of your personal data as per Art. 6(1) sentence 1, lit. a GDPR, your personal data (first name, surname, address, email address, phone number, date of birth, IP address, gender) and data required to process the transaction (item, invoice amount, due date, total amount, invoice number, taxes, currency, order date and order time) will be transferred to our partner Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, to process this payment method.
Our partner makes enquiries and retrieves information from publicly accessible databases and credit agencies to check the identities and creditworthiness of our customers. Learn more about the provider of this information and additional credit information based on mathematical and statistical processes in addition to further details about the processing of your data once it has been disclosed to our partner Shopify International Limited, Victoria Buildings, 2nd Floor, in the Shopify privacy statement: https://www.shopify.com/legal/privacy
The information received on the statistical likelihood of non-payment is used by our partner Shopify International Limited, Victoria Buildings, 2nd Floor, to make a balanced decision on the establishment, performance or termination of the contractual relationship. You can state your position on the decision made and contest it by contacting our partner Shopify International Limited, Victoria Buildings, 2nd Floor. You also reserve the right to withdraw consent to transfer your data granted to us during the order process at any time with future effect.
Email marketing
Email newsletter with registration
If you register to receive our newsletter, we will use the required data, or data otherwise shared by you, to regularly send you our email newsletter on the basis of your consent as per Art. 6(1) sentence 1, lit. a GDPR. You can unsubscribe from the newsletter at any time either by sending us a notification using the contact information provided below, or by clicking on the corresponding link in the newsletter. Once you have unsubscribed, we will delete your email address from the list of recipients, provided you have not granted your consent to further use of your data as per Art. 6(1) sentence 1, lit. a GDPR, or we reserve the right to continue using your data as permitted according to the pertinent regulations and mentioned in this Privacy Statement.
Newsletter distribution
Our service providers are also responsible for sending the newsletter within the scope of processing on our behalf. If you have any queries related to the service providers and the terms of our collaboration with them, we ask you to contact us using the contact information provided in this Privacy Statement.
Our service providers are situated in and/or use servers located in the following countries for which the EU commission has granted an adequacy decision to verify an adequate level of data protection: Canada.
Our service providers are situated and/or use servers located in the US and India. Data transfers to these countries are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaborations with our newsletter service providers are governed by the Standard Contractual Clauses (SCC) issued by the EU commission.
Customer reviews
We use the tool Judge.me (Judge.me LLC, PO Box 7403, Jackson, Wyoming 83002, USA) to collect and display product reviews on our shop. You can read the Judge.me privacy statement by clicking on the link below: https://judge.me/privacy.
Seminars and webinars
We process data (e.g. names and addresses along with information on special requests from participants) and contract information (e.g. used services, names of contact people, payment information) to prepare, perform and follow-up on our seminars as per Art. 6(1) lit. b GDPR.
Information provided by participants may be stored in our query management system as per Art. 6(1) lit. b GDPR.
We use the tool WebinarGeek (WebinarGeek, Chroomstraat 12, 2718 RR Zoetermeer, the Netherlands) to host our webinars. You can read the WebinarGeek privacy statement by clicking on the link below: https://www.webinargeek.com/privacy.
Applications
Applications for advertised job vacancies or unsolicited applications should be sent by email to bewerbung@santaverde.de.
Purposes and legal bases for processing
We process your personal data in compliance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) where necessary to make a decision on the establishment of an employment relationship at our company. The legal basis for this processing is Art. 88 GDPR in conjunction with Art. 26 BDSG-new and Art. 6(1) lit. b GDPR, namely to enter into or perform contractual relationships. Furthermore, we are also entitled to process your personal data where required to fulfil our contractual obligations (Art. 6(1) lit. c GDPR) or to defend legal claims asserted against us. This data processing takes place on the legal basis of Art. 6 (1) lit. f GDPR. Our legitimate interest in this regard is the requirement to provide evidence in proceedings as per the General Equal Treatment Act (AGG), for example. If you grant us your consent to the processing of your personal data for certain purposes, the legality of this processing is based on your consent as per Art. 6(1) lit. a GDPR.
Previously granted consent can be withdrawn at any time with future effect (see Section 9 of this Privacy Statement). If an employment relationship is established between you and us, we may continue to process personal data that we have received from you as per Art. 88 GDPR in conjunction with Art. 26 BDSG-new where this is required to perform or terminate the employment relationship, or in order to exercise or fulfil rights and obligations with regard to the representation of interests for the employee that arise from legislation, a collective agreement, a works agreement or a service agreement.
Categories of personal data
We only process data related to your application. This may include general information on you such as your name, address and contact details, information on your professional qualifications and school education or information on your career or other information that you submit to us in relation to your application.
Data sources
We process personal data that we receive when you contact us or send your application by post or email.
Recipients of personal data
Only departments and employees at our company who require your personal data for the fulfilment of our contractual and statutory obligations or to pursue our legitimate interests shall be granted access thereto. Your data will only be transferred to recipients external to our company where permitted or required by statutory provisions, where this disclosure is required to fulfil statutory obligations, or you have granted your consent to this disclosure.
Transfers to third countries
Your personal data is not transferred to third countries.
Retention periods
We store your personal data for as long as we require it to make a decision on your application. Your personal data and application documents will be stored for up to 6 months after the end of the application process (e.g. notification of rejection) unless continued storage is required or permissible by law. Furthermore, we shall only store your personal data if necessary to assert, exercise or defend legal claims for the duration of the legal proceedings where permissible by law or in specific cases. In the case that you have consented to the extended storage of your personal data, this data will be stored on the basis of your consent. If the application process results in the establishment of an employment, traineeship or internship relationship, your personal data will initially continue to be stored and subsequently transferred to your personnel record, where required and permissible.
Your rights
Each data subject is entitled to the right to access as per Art. 15 GDPR; the right to rectify as per Art. 16 GDPR; the right to erasure as per Art. 17 GDPR; the right to restrict processing as per Art. 18 GDPR; the right to notification as per Art. 19 GDPR; and the right to data portability as per Art. 20 GDPR. In addition to the above, you are also entitled to lodge a complaint with a supervisory authority as per Art. 77 GDPR if you have reason to suspect that the processing of your data may violate the provisions of the law. Your right to lodge a complaint shall continue to apply without prejudice to other administrative or judicial remedies. If your data is processed on the basis of your consent, according to Art. 7 GDPR, you are entitled to withdraw your consent to this use of your personal data at any time. Please note that this withdrawal only applies with future effect. Processing that takes place prior to withdrawal is not affected by this and shall remain lawful. Furthermore, please note that we are required to store certain data for a certain period to fulfil our statutory obligations (see Section 8.6 of this Privacy Statement). You are welcome to contact us to exercise your rights.
Necessity behind the provision of personal data
The provision of personal data within the scope of the application process is neither required by law nor contractually. As such, you are not required to provide information on your personal data. Nevertheless, we would like to point out that this information is required to submit an application or conclude a contract related to an employment relationship with us. If you fail to provide any personal data, we will not be able to make a decision on whether to establish an employment relationship with you. We advise you to only provide personal data required to submit your application during the application process.
Right to object
In the event that we process your personal data in order to safeguard our legitimate interests as per Art. 6(1) lit. f GDPR, you shall be entitled to lodge an objection to this processing at any time on grounds that arise from your personal situation as per Art. 21 GDPR. We shall then cease to process this personal data in the absence of any compelling and legitimate grounds for continued processing. Compelling and legitimate grounds in this regard must override your interests, rights and liberties, or the processing must be required to assert, exercise or defend legal claims.
Competitions
If you register with us for a competition, we will use your personal data to execute and implement the competition. This data processing takes place on the legal basis of Art. 6(1) lit. b GDPR. We provide additional information on competitions in the terms of participation, which you are required to accept in order to participate in the competition.
If the competition is hosted on a social network (e.g. Facebook or Instagram) the terms of use and privacy statement of the respective platform shall also apply.
Surveys
If you participate in a survey, we will use your personal data to execute and implement the survey. This data processing takes place on the legal basis of Art. 6(1) lit. b GDPR. We use the survey tool SurveyMonkey (SurveyMonkey Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland) for our surveys. SurveyMonkey collects your personal data when you participate in a survey or send a form. You can read the SurveyMonkey privacy statement by clicking here.
Cookies and other technologies
General information
In order to make our website more attractive and facilitate the use of certain features, we use technologies, including cookies, on various pages of our website. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e. once you close your browser (session cookies). Other cookies remain on your device and enable us to recognise your browser when you next visit our website (permanent cookies).
We also use technologies required to facilitate the use of certain features on our website (e.g. shopping basket feature). These technologies collect and process information such as your IP address, the time of your visit, device and browser information in addition to information on how you have used our website (e.g. information on the contents of your shopping basket). This processing protects our legitimate interest in the optimised presentation of our services as per Art. 6(1) sentence 1, lit. f GDPR.
Furthermore, we also use certain technologies to fulfil statutory obligations to which we are subject (e.g. in order to verify that we have obtained your consent to the processing of your personal data) in addition to web analyses and online marketing. You can learn more about this processing, including the respective legal basis, in the following sections of this Privacy Statement. We also use technologies that are not individually listed in this Privacy Statement. You can learn more about these technologies and the legal bases for this processing on the Usercentrics platform. Access this platform by clicking on the fingerprint button on the left or right at the bottom of the website.
You can use the following links to configure your browser's cookie settings. Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have consented to the use of technologies as per Art. 6(1) sentence 1, lit. a GDPR, you reserve the right to withdraw this consent at any time by sending a notification to the contact information provided in this Privacy Statement. Alternatively, you can click on the fingerprint button on the left or right at the bottom of the website. The functionality of this website may be limited if you deactivate cookies.
Use of the Usercentrics Consent Management platform to manage consents
We use the Usercentrics Consent Management platform (Usercentrics) on our website to inform you about cookies and other technologies that we use on our website and to obtain, manage and record your consent to the processing of your personal data by these technologies, where required by law.
According to Art. 6(1) sentence 1, lit c. GDPR, this is legally required to fulfil our statutory obligation as per Art. 7(1) GDPR to verify that we have obtained your consent to process your data. Usercentrics is a service provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, the Usercentrics web server stores a server log file containing information such as your anonymised IP address, the date and time of your visit, device and browser information in addition to information on whether you have granted your consent to the processing of your data. This data will be deleted after 3 years, provided you have not granted your consent to further use of your data as per Art. 6(1) sentence 1, lit. a GDPR, or we reserve the right to continue using your data as permitted according to the pertinent regulations and mentioned in this Privacy Statement.
Use of cookies and other technologies for web analysis and advertising
If you have granted your consent to the following as per Art. 6(1) sentence 1, lit a. GDPR, we will use the following cookies and other technologies from third-party providers on our website. Once the purpose for which the data was collected ceases to apply and we no longer use the respective technology, we will delete all data collected in relation thereto. You reserve the right to withdraw your consent at any time with future effect. You can learn more about your withdrawal option in the ‘Cookies and other technologies’ section. Further information, including the bases of our collaborations with the individual service providers, can be found in the sections on the individual technologies. If you have any queries related to the service providers and the terms of our collaboration with them, we ask you to contact us using the contact information provided in this Privacy Statement.
Use of Google services
We use the following technologies provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google). Information related to your visit to our website, which is automatically collected by the Google technologies, is generally sent to a server operated by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission.
In place of an adequacy decision, our collaboration with Google is governed by the Standard Contractual Clauses (SCC) issued by the EU commission. If your IP address is collected by Google technologies, it will be truncated through the activation of IP anonymisation prior to being saved on Google's servers. Only in exceptional cases will your full IP address be sent to a Google server and truncated there.
In the absence of any terms to the contrary for individual technologies, this data processing takes place on the basis of an agreement concluded between the joint controllers for the respective technology as per Art. 26 GDPR. You can learn more about how Google uses your data by reading the Google privacy statement.
Google Analytics
Google Analytics automatically collects and stores data (IP address, time of your visit, device and browser information and information about your use of our website) for website analyses to create a user profile using pseudonyms. Cookies may be set for this purpose. Your IP address will not be merged with other data from Google. This processing takes place on the basis of an agreement concluded for data processing on our behalf performed by Google.
In order to facilitate web analyses and advertising, Google Analytics uses the extension feature DoubleClick cookie to recognise your browser when you visit other websites. Google uses this information to compile reports on your website activities and provide other services related to the use of our website.
Google Ads
In order to place ads in Google search results and third-party websites, when you visit our website Google sets a Remarketing cookie that automatically enables personalised ads based on the collection and processing of data (IP address, time of your visit, device and browser information and information about your use of our website), the use of a pseudonymous cookie ID and the websites you have visited.
Any processing beyond the scope of the above shall only take place if you have activated the ‘personalised ads’ setting in your Google account. If, in this case, you are logged in to your Google account when you visit our website, Google will use your data together with Google Analytics in order to create and define target group lists for cross-device remarketing.
In order to analyse visits to our website and track events, we use Google Ads Conversion Tracking to track your user behaviour if you are led to our website by clicking on an ad placed by Google Ads. Cookies may be set for this purpose, and data may be collected (IP address, time of your visit, device and browser information and information about your use of our website based on predefined events, e.g. the use of our website or registration to our newsletter) to create a user profile using pseudonyms.
Google Maps
Data collected by Google Maps related to your use of the maps feature, particularly your IP address and location, is sent to Google and subsequently processed by Google to facilitate the visual display of geographical information. We do not have any influence on this subsequent processing.
Google reCAPTCHA
In order to prevent the misuse of our web forms and spam sent by automated software (bots), Google reCAPTCHA collects (IP address, time of your visit, browser information and information about your use of our website) and analyses your use of our website on the basis of JavaScript or cookies.
This includes the analysis of other cookies stored on your browser by Google services. Personal data from the input fields of the respective form will not be extracted or stored.
YouTube Video Plugin
The YouTube video plugin collects data (IP address, time of your visit, device and browser information) in privacy-enhanced mode, which is transmitted to Google and subsequently processed by Google if you play a video to facilitate embedded third-party content on our website.
Use of Facebook services
Use of the Facebook pixel
We use the Facebook pixel for technologies provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (Facebook), as listed below. The Facebook pixel automatically collects and stores data (IP address, time of your visit, device and browser information and information about your use of our website based on predefined events, e.g. the use of our website or registration to our newsletter) to create a user profile using pseudonyms. Furthermore, when you visit our website, the Facebook pixel automatically sets a cookie that facilitates the automatic recognition of your browser when you visit other websites through the use of a pseudonymous cookie ID. Facebook merges this information with other data from your Facebook account and uses it to compile reports on your website activities and perform other services related to the use of our website, in particular personalised and group-based ads.
Information related to your visit to our website, which is automatically collected by Facebook technologies, is generally sent to a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission. If data transfers to the US fall within our scope of responsibility, our cooperation is based on the Standard Contractual Clauses (SCC) issued by the EU commission. You can learn more about how Facebook uses your data by reading the Facebook privacy statement.
Facebook Ads
We use Facebook Ads to advertise our website on Facebook and other platforms. We determine the parameters for each ad campaign. Facebook is responsible for the precise implementation thereof, including the decision whether to place ads for individual users. In the absence of any terms to the contrary for individual technologies, this data processing takes place on the basis of an agreement concluded between the joint controllers as per Art. 26 GDPR. Our joint responsibility is restricted to the collection of data and the transfer thereof to Facebook Ireland. Subsequent processing of your data by Facebook Ireland is not covered by this.
Social Media
Our pages on Facebook, Twitter, Instagram, YouTube, Pinterest, Xing
If you have granted your consent to the respective social media provider as per Art. 6(1) sentence 1, lit. a GDPR, when you visit our pages on the social media sites listed above, your data will automatically be collected and stored for market research and advertising purposes to permit the creation of a user profile on the basis of pseudonyms. This profile may be used to activate ads on and off the platforms that may correspond to your personal interests, for example. Cookies are generally set for this purpose. Please consult the privacy policies for the social media providers linked below to learn more about how your data is processed and used by the respective social media provider in addition to your contact options, rights and how to configure your settings to protect your privacy. You are welcome to contact us if you require any assistance in this regard.
Facebook is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (Facebook Ireland). Data automatically collected by Facebook Ireland about your use of our Facebook page is generally transferred to a server operated by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaboration with Facebook is governed by the Standard Contractual Clauses (SCC) issued by the EU commission. Data processing that occurs when you visit a Facebook page takes place on the legal basis of an agreement between joint controllers as per Art. 26 GDPR. You can learn more about processing on Facebook, particularly in relation to insight data, by clicking here.
Twitter is a service provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (Twitter). Information related to your visit to our Twitter profile, which is automatically collected by Twitter, is generally sent to a server operated by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaboration with Twitter is governed by the Standard Contractual Clauses (SCC) issued by the EU commission.
Instagram is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (Facebook Ireland). Data automatically collected by Facebook Ireland about your use of our Instagram page is generally transferred to a server operated by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaboration with Instagram is governed by the Standard Contractual Clauses (SCC) issued by the EU commission. Data processing that occurs when you visit an Instagram page takes place on the legal basis of an agreement between joint controllers as per Art. 26 GDPR. You can learn more about processing on Instagram, particularly in relation to insight data, by clicking here.
YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
(Google). Information related to your visit to our YouTube profile, which is automatically collected by Google, is generally sent to a server operated by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaboration with YouTube is governed by the Standard Contractual Clauses (SCC) issued by the EU commission.
Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (Pinterest). Information related to your visit to our Pinterest profile, which is automatically collected by Pinterest, is generally sent to a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA and stored there. Data transfers to the US are not currently subject to an adequacy decision from the EU commission. In place of an adequacy decision, our collaboration with Pinterest is governed by the Standard Contractual Clauses (SCC) issued by the EU commission.
Xing is a service provided by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.
Contact information and your rights
As a data subject, you are entitled to the following rights:
- As per Art. 15 GDPR, the right to receive information about personal data processed by us to the extent specified therein;
- As per Art. 16 GDPR, the right to demand the immediate rectification of any incorrect or incomplete personal data stored by us;
-
As per Art. 17 GDPR, the right to demand the erasure of personal data stored by us, provided continued processing is not required
- to exercise our right to freedom of speech and information;
- to fulfil our statutory obligations;
- on grounds of public interest, or;
- to assert, exercise of defend legal claims.
-
As per Art. 18 GDPR, the right to demand that processing of your personal data is restricted, provided that
- you contest the accuracy of the data;
- the processing is not lawful, but you do not permit the erasure of this data;
- we no longer require this data, but you need it to assert,
exercise or defend legal claims, or;
- you have lodged an objection to the respective processing as per Art. 21 GDPR.
- As per Art. 20 GDPR, you have the right to receive the personal data you have provided us with in a structured, conventional and machine-readable format, or to request the transfer thereof to another data controller;
- As per Art. 77 GDPR, you are entitled to lodge a complaint with a supervisory authority. As a rule, you can direct this complaint at the supervisory authority responsible for your domicile, workplace or our registered office.
If you have any questions related to the collection, processing or use of your personal data, or you would like to request information, rectification, restrict processing or delete your data, withdraw previously granted consent or object to a particular use of your data, please contact our company data protection officer.
Data protection officer
Philipp Herold/Herold Unternehmensberatung GmbH
Hafenstraße 1a
23568 Lübeck
Germany
Right to object
In the event that we process your personal data to protect our compelling and legitimate interests as described above, you can object to this processing with future effect. If this processing takes place for the purpose of direct marketing, you can exercise the above right at any time. However, if this processing takes place for other purposes, you shall only be entitled to object thereto in the presence of grounds arising from your personal situation.
Once you have exercised your right to object, we shall cease with processing your personal data for these purposes unless we are able to prove compelling and legitimate grounds that override your interests, rights and liberties, or the processing is required to assert, exercise or defend legal claims.
This Privacy Statement was created using the Trusted Shops legal copywriter in cooperation with FÖHLISCH Rechtsanwälte (in German Language).
