Privacy Policy
Introduction and Terms
1. Introduction
In the operation of our website www.ullamusall-beauty.com (hereinafter referred to as the “Website”), we process personal data. These are treated confidentially by us and processed in accordance with applicable laws, particularly the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG-new). Through our privacy policy, we aim to inform you about the personal data we collect from you, the purposes and legal basis for their use, and, if applicable, to whom we disclose them. Furthermore, we will explain the rights available to you for the protection and enforcement of your data privacy.
2. Terms
Our privacy policy includes specialized terms found in the GDPR and the German Federal Data Protection Act (BDSG-new). To enhance your understanding, we would like to provide preliminary explanations of these terms in simple language:
2.1 Personal Data
“Personal data” refers to all information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Details of an identified person can include, for example, the name or email address. Personal data also includes information where the identity is not immediately apparent but can be determined by combining one’s own or external information, thus identifying the person. A person can be identified, for instance, through the disclosure of their address or bank details, date of birth, username, IP addresses, and/or location data. Relevant here are all pieces of information that in any way allow conclusions to be drawn about a person.
2.2 Processing
Under “processing,” as defined in Art. 4 No. 2 GDPR, every operation related to personal data is understood. This includes, in particular, the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination, or any other form of provision, comparison, or linking, restriction, erasure, or destruction of personal data.
3. Responsible Company and Data Protection Officer
3.1 Data Controller
Responsible for data processing is:
Company:
Ulla Musall GbR (“we”)
Legal Representatives:
Ursula Musall and Roger Fumey (Managing Directors)
Address:
Stammannstraße 15
22303 Hamburg
Tel.: +49 (0)40 XXXXXXXXX
Email: info@ullamusall-beauty.com
4. Processing Framework
4.1 Processing Framework: Website
Within the framework of the website with the URL www.ullamusall-beauty.com, we process the personal data listed individually under points 6-14. We only process data from you that you actively provide on our website (e.g., by filling out forms) or that you automatically make available when using our services. Your data is processed exclusively by us and generally not sold, lent, or disclosed to third parties. If we use external service providers in processing your personal data, this is done within the framework of so-called order processing, where we, as the client, have instructive authority over our contractors. For the operation of our website, we engage external service providers for hosting, as well as for maintenance, support, and further development. If additional external service providers are involved in individual processes listed in points 6-14, they will be named there. Data transmission to third countries generally does not occur and is not planned. Exceptions to this principle will be communicated in the processing descriptions outlined below.
5. Individual Processings
5.1 Provision of the Website and Server Log Files
5.1.1 Description of Processing
Upon each visit to the website, we automatically collect information that your browser transmits to our server. These are also stored in the so-called log files of our system. This includes the following data:
Your IP address
The browser software you used, including its version and language
The operating system you used
The website from which you accessed our website (referrer)
The subpages you accessed on our website
The date and time of your visit to our website
Your internet service provider
Transferred data volume
The temporary storage of your IP address by the system is necessary to deliver our website to the user’s device. For this, the user’s IP address must be stored for the duration of the session. However, your IP address is not recorded in our log files.
5.1.2 Purpose
Processing is carried out to enable the website’s access and ensure its stability and security. Additionally, processing serves the statistical evaluation and improvement of our online offering.
5.1.3 Legal Basis
Processing is necessary to safeguard the overriding legitimate interests of the data controller (Article 6(1)(f) of the GDPR). Our legitimate interest lies in the purpose mentioned in point 5.1.2.
5.1.4 Storage Duration
Data is deleted as soon as it is no longer required for the purpose of its collection. In the case of data collected for providing the website, this occurs when the respective session is terminated. Logfiles are deleted after 30 days.
6. Registration
6.1 Description of Processing
Certain functions and offers on our website are available to you only as a registered user. By registering, you enter into a free usage agreement with us. Registration grants you a personal user account on our website. Registration is completed by filling out and electronically submitting the registration form at https://ullamusall-beauty.com/mein-konto/. To register, you need to provide your email address, a freely chosen username, and a freely chosen password. By clicking the “Register” button, you submit the form to us. You will then receive an automatic welcome email containing a link to confirm your email address. Only after successfully verifying your email address by clicking the confirmation link will your account on our website be activated. As a registered user, you can shop on our website more quickly and conveniently by storing your billing and delivery addresses, as well as your preferred payment method, in your user profile. This way, you do not have to enter your personal data again for subsequent purchases.
6.2 Purpose
Processing is carried out to provide you with the functions of our website for registered users.
6.3 Legal Basis
Processing is necessary for the conclusion and fulfillment of the usage agreement (Article 6(1)(b) of the GDPR). Without providing your personal data during registration, we cannot fulfill our contractual obligations.
6.4 Storage Duration
We automatically delete the data upon the termination of your usage agreement. You can terminate the usage agreement independently by selecting the “Delete Profile” function in your user account settings. Alternatively, you can inform us via email at info@ullamusall-beauty.com or by mail that you no longer wish to be a registered user of our website. We will promptly delete your user account. Additionally, as a logged-in user, you can edit and remove your own contributions, details, and information at any time.
6.5 Recipient
During the order process, it may occur that the data is transferred to a shipping service engaged by us within the scope of order processing. This is done for the purpose of fulfilling the contract according to Article 6(1)(b) of the GDPR.
7. Shopping
7.1 Description of Processing
You can shop on our website as a guest or as a registered user. During your order process, we process personal data from you. The mandatory fields marked with an asterisk “*” in our online shop must be filled out by you. Otherwise, it is not possible for us to conclude a purchase agreement with you and send you the desired goods. All other information is voluntary. When shopping on our website, you can also choose one of the offered payment methods (PayPal) to settle the purchase price. Upon completing your order, the data required for payment will be forwarded to the respective payment service provider. If you shop as a registered user on our website, you can store your billing and delivery addresses, as well as your preferred payment method in your user profile for a faster and more convenient order with us.
7.2 Purpose
Processing is carried out for the conclusion and execution of purchase agreements.
7.3 Legal Basis
Processing is necessary for the conclusion and fulfillment of purchase agreements (Article 6(1)(b) of the GDPR).
7.4 Storage Duration
Due to commercial and tax regulations, we are obligated to store your address, payment, and order data for a period of ten years. However, after two years, we restrict the processing. This means that your data will only be kept separately to comply with legal retention periods and will be promptly deleted after their expiration.
7.5 Recipient
For the processing of your payment, personal data will be transferred to one of the external payment service providers listed below, selected by you during your purchase: PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. Further information on data protection at PayPal can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.
8. Contact Form and Contact via Email
8.1 Description of Processing
To facilitate contact, we have provided a contact form on our website. In this form, you are requested to enter your email address, your name, and a message to us. When you click the “Submit” button, the data is transmitted to us using SSL encryption (see section 15). The contact form can only be submitted if you accept our privacy policy by clicking the corresponding checkbox. You can also contact us via the email addresses provided on the website. In this case, the personal data transmitted with the email will be processed by us.
8.2 Purpose
By providing a contact form on our website, we aim to offer you a convenient way to get in touch with us. The data provided through the contact form or your email is used exclusively for the purpose of processing and responding to your inquiry.
8.3 Legal Basis
Processing is necessary to safeguard the overriding legitimate interests of the data controller (Article 6(1)(f) of the GDPR). Our legitimate interest lies in the purpose mentioned in section 8.2. If email contact is aimed at concluding or fulfilling a contract, the data processing is carried out for contract fulfillment (Article 6(1)(b) of the GDPR).
8.4 Storage Duration
We delete the data as soon as it is no longer necessary for the purpose of its collection. This is usually the case when the respective communication with you is concluded. Communication is considered concluded when it can be inferred from the circumstances that your inquiry has been finally clarified. If legal retention periods oppose deletion, deletion will take place immediately after the expiration of the statutory retention period.
9. Cookies
9.1 Description of Processing
Our website uses cookies. Cookies are small text files that are stored on the user’s device when visiting a website. Cookies contain information that enables the recognition of a device and, if applicable, certain functions of a website. Most often, we use so-called “session cookies,” which are automatically deleted when you end your internet session and close the browser. Other cookies remain stored on your device for a longer period and allow partner companies to recognize your browser or computer (persistent cookies). Depending on the cookie, persistent cookies are automatically deleted according to the predetermined storage period.
9.2 Purpose
We use cookies to make our website more user-friendly and to offer the functions described in section 9.1. We collaborate with advertising partners who help us make our website as interesting as possible for you. For this purpose, cookies from third parties, our partner companies, may also be stored on your hard drive on our website. If we allow third parties to use such cookies, we will inform you in the following sections about the information collected in this way.
9.3 Legal Basis
Processing is necessary to safeguard the overriding legitimate interests of the data controller (Article 6(1)(f) of the GDPR). Our legitimate interest lies in the purpose mentioned in section 9.2.
9.4 Storage Duration
Cookies are automatically deleted at the end of a session or upon expiration of the specified storage period. Since cookies are stored on your device, you, as a user, have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Below, we have compiled links that lead you to instructions on how to change settings in the common browsers. You can also find more information in the support menu of your browser: Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647 Safari: https://support.apple.com/kb/ph21411?locale=de_DE Opera: http://help.opera.com/Windows/10.20/de/cookies.html Already stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are disabled, certain functions of our website may not be used or only to a limited extent.
10. Newsletter
10.1 Description of Processing
We send out newsletters at irregular intervals to inform you about our offers. You will receive our newsletter only if you actively subscribe to our distribution list. You can subscribe by filling out and submitting a newsletter registration form on our website or as part of an order in our online shop. The only required information for newsletter registration is your email address. All other details (such as your first and last name) are voluntary and serve solely for the personalization of emails. To carry out and verify newsletter registrations, we use the double-opt-in procedure. Registration takes place in several steps. Initially, you sign up for the newsletter on our website. You will then receive an email from us at the email address you provided. With this email, we ask you to confirm that you have actually subscribed to the newsletter and wish to receive it. Confirmation is done by clicking on a confirmation link contained in the email. Only after successful confirmation will we add you to our newsletter distribution list and send you emails in the future. In the context of the double-opt-in procedure, we store both the registration and confirmation date, time, and your IP addresses. If you purchase goods or services on our website and provide your email address, it may subsequently be used by us to send a so-called customer retention newsletter. In such a case, the newsletter will only contain direct advertising for our own similar goods or services.
10.2 Purpose
Processing is done to offer the newsletter function and send newsletter emails to subscribers and existing customers. The collection and storage of the date, time, and IP addresses during newsletter registration serve to document the given consent and protect against the abusive entry of email addresses.
10.3 Legal Basis
For our subscriber newsletter, processing is based on consent pursuant to Article 6(1)(a) of the GDPR. You can access the consent declaration on our website at any time. Your consent is voluntary. The collection and storage of the date, time, and IP addresses during newsletter registration are necessary to safeguard the overriding legitimate interests of the data controller (Article 6(1)(f) of the GDPR). Our legitimate interest lies in the purpose mentioned in section 10.2. For our existing customer newsletter, processing is based on Article 6(1)(f) of the GDPR to safeguard the overriding interests of the data controller. Our legitimate interest lies in direct advertising to existing customers, which is permissible within the framework of § 7(3) UWG.
10.4 Storage Duration and Withdrawal of Consent
If you do not confirm your newsletter registration within 24 hours of receiving the corresponding registration email, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can end your newsletter subscription at any time by revoking your consent. A simple declaration (via email to info@ullamusall-beauty.com or by post) is sufficient. Unsubscribing from the newsletter is also possible by clicking the unsubscribe link in each newsletter email. With the revocation of your consent, no more newsletters will be sent to you, and your personal data will be removed from our active distribution list. We will restrictively include your email address in our so-called blacklist to enforce your revocation. This ensures that you will not receive newsletters from us in the future, and your email address will not be misused by third parties.
10.5 Recipients and Transfer to Third Countries
To manage our newsletter distribution list and send emails, we use the services of the newsletter provider Mailchimp. This is done as part of order processing. Mailchimp is offered by The Rocket Science Group, LLC, 512 Means Street, Suite 404 Atlanta, GA 30318, USA (hereinafter referred to as “Mailchimp”). When you register for the newsletter, the data provided during the registration process is transferred to Mailchimp and processed on Mailchimp servers in the USA. Mailchimp is subject to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework. More information on data protection at Mailchimp can be found in the service provider’s privacy policy at http://mailchimp.com/legal/privacy/.
11. Social Networks
11.1 Description of Processing
Certain subpages of our website contain so-called Social Plugins offered by external social networks such as Facebook, X Corp., Instagram, TikTok, and Google+. When you visit a page that includes such a plugin, your browser establishes a direct connection with the servers of the social network. The content of the respective Social Plugin is transmitted directly to your browser by the social network and displayed on our website. To prevent this, we use the so-called two-click solution. We have embedded the Social Plugins on our website in such a way that the connection of the Social Plugins with the servers of the social networks is interrupted by default. If you want to communicate directly with a social network on our website via the Social Plugin and enable data exchange, you must click on the desired Social Plugin and activate it. Once a Social Plugin is activated, we no longer have control over the extent of the data collected by the respective social network. We inform you to the best of our knowledge. By activating a Social Plugin, your IP address is transmitted to the respective social network in connection with the address of our website. If you are logged in to the social network when visiting our website, this information will be associated with your user account there. When you interact with an activated Social Plugin, such as “sharing,” “liking,” or “retweeting” a post through the Social Plugin, this information is also transmitted directly to the respective social network and stored in your user account there. The social networks with which you interact store your data as user profiles and also use them for advertising purposes, market research, and/or to tailor their websites to your needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact the social networks directly.
11.2 Purpose
Processing is carried out to enable you to have convenient, user-friendly communication with social networks.
11.3 Legal Basis
Processing is necessary to safeguard the overriding legitimate interests of the data controller (Article 6(1)(f) of the GDPR). Our legitimate interest lies in the purpose mentioned in section 11.2.
11.4 Recipients and Transfer to Third Countries
By activating a Social Plugin, your data is transmitted to one of the following social networks:
Facebook: Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA. More information on data protection at Facebook can be found at Facebook Privacy Policy; Facebook Help, Facebook Privacy Information, and Facebook Privacy.
Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA. More information on data protection at Instagram can be found at Instagram Help.
The social networks also process your personal data in the USA and are subject to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at EU-US Privacy Shield.
11.5 Facebook Custom Audiences
Our website uses the remarketing function “Custom Audiences” of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). This allows users of the website to be shown interest-based advertisements (“Facebook Ads”) during visits to the Facebook social network or other websites using the same procedure. We pursue the interest in displaying advertising that is of interest to you in order to make our online offers more attractive to you. The legal basis for the processing of your data is Article 6(1)(f) of the GDPR. In the case of Custom Audiences, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of this tool and therefore inform you based on our knowledge: By integrating Facebook Custom Audiences, Facebook receives information that you have visited our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can assign the visit to your Facebook account. Even if you are not registered with Facebook or have not logged in, there is the possibility that the provider will process your IP address and other identifying features. The deactivation of the “Facebook Custom Audiences” function is possible for logged-in users at Facebook Ad Settings. For further information on data processing by Facebook, please refer to Facebook Privacy.
11.6 X Corp.
X is an offering by X Corp. International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X Corp.”). The information automatically collected by X Corp. about your use of our online presence on X Corp. is usually transferred to a server of X Corp., Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, and stored there. There is a decision by the European Commission on an adequate level of data protection for the USA as a basis for third-country transfer, as far as the respective service provider is certified. Until certification, our collaboration is based on the standard data protection clauses of the European Commission.
11.7 Instagram (by Meta)
Instagram (by Meta) is an offering by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Instagram is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA, and stored there. For the USA, there is a decision by the European Commission on an adequate level of data protection as a basis for third-country transfer, as far as the respective service provider is certified. Certification is available. Our cooperation is additionally based on the standard data protection clauses of the European Commission. The data processing in connection with the visit of an Instagram (by Meta) fan page is based on an agreement between jointly responsible parties according to Art. 26 GDPR. Further information (information on insights data) can be found at Facebook Legal Terms.
11.8 TikTok
TikTok is an offering by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). The information automatically collected by TikTok about your use of our online presence on TikTok may be transmitted to TikTok servers in states outside the EU/EEA and stored there (including the USA). For the USA, there is a decision by the European Commission on an adequate level of data protection as a basis for third-country transfer, as far as the respective service provider is certified. Until certification, our collaboration is based on the standard data protection clauses of the European Commission. The same applies to other third countries for which there is no adequacy decision.
12. Google Analytics
12.1 Description of Processing
Our website uses “Google Analytics,” a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Analytics uses cookies (see Section 9) that enable an analysis of your use of our services. The information generated by the cookie about your use is usually transmitted to a Google server in the USA and stored there. However, we use Google Analytics exclusively with IP anonymization. This means your IP address is truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics created by Google Analytics include information on how many users visit our website, the country or location of access, which subpages are accessed, and through which links or search terms visitors reach our website. The terms of use for Google Analytics can be found at http://www.google.com/analytics/terms/de.html. An overview of privacy at Google Analytics is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Google’s privacy policy can be viewed at http://www.google.de/intl/de/policies/privacy.
12.2 Purpose
The processing is carried out to evaluate the use of our website. The information gained serves to improve and tailor our online presence to meet your needs.
12.3 Legal Basis
The processing is necessary to safeguard the overriding legitimate interests of the data controller (Article 6(1)(f) of the GDPR). Our legitimate interest lies in the purpose mentioned in Section 12.2.
12.4 Storage Period and Right to Object
The storage period, as well as your control and adjustment options for cookies, are explained in Section 9. You can object to the processing of data by Google Analytics at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. Alternatively, you can click on the following link. This sets an opt-out cookie on your device, which prevents the collection of your data during future visits to this website. The analyzed data processed and stored by Google Analytics is automatically deleted by us after 14 months.
12.5 Recipients and Transfer to Third Countries
Google Analytics acts as a service provider for us within the framework of commissioned data processing. Google processes your personal data in the USA and is subject to the EU-US Privacy Shield. Further information on the EU-US Privacy Shield can be found at https://www.privacyshield.gov/EU-US-Framework.
12.6 Browser Plugin
You can prevent the storage of cookies by adjusting your browser software accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
12.7 Objection to Data Collection
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, preventing the collection of your data during future visits to this website: Google Analytics deactivate. For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
12.8 Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
12.9 Demographic Features in Google Analytics
This website uses the “demographic features” function of Google Analytics. This allows reports to be created that contain statements about the age, gender, and interests of site visitors. This data comes from Google’s interest-based advertising and visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this function at any time through the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics, as outlined in the “Objection to Data Collection” section.
12.10 Google Conversion Tracking
In addition, we use Google’s Conversion Tracking in this context. When you click on an ad placed by Google, a cookie for conversion tracking is placed on your device for 30 days. This cookie is not used for personal identification. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers.
12.11 Legal Basis for this Data Processing is Article 6(1)(f) of the GDPR.
You can deactivate interest-based Google ads in your browser by activating the “Off” button at https://adssettings.google.de/authenticated or by deactivating cookies for conversion tracking in your browser settings by blocking cookies from the domain www.googleadservices.com. We would like to point out that in this case, you may not be able to use all functions of this service to their full extent.
12.12 Google Remarketing Function
With Google’s remarketing function, we can present our users with ads based on their interests on other websites within the Google Ads network (so-called “Google Ads” or ads on other websites). For this purpose, the user’s interactions on our website are analyzed to display targeted advertising to users even after they have visited our website on other pages. Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, referred to as a “cookie,” records the visits of these users. This number serves for the unique identification of a web browser on a specific computer and is not used to identify a person; personal data is not stored.
12.13 Legal Basis for Data Processing is Article 6(1)(f) of the GDPR.
You can disable the use of cookies by Google by installing the plug-in provided at the following link: www.google.com/settings/ads/plugin.
12.14 Other Services of the Google Marketing Platform
Furthermore, our website uses additional services of the Google Marketing Platform (formerly “Google DoubleClick”). These services use cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing ads multiple times. Google collects information about which ads are displayed in which browser using a cookie ID and can prevent them from being displayed multiple times. Additionally, Google can capture conversions using cookie IDs, determining whether a user sees an ad and later visits the advertiser’s website to make a purchase. According to Google, these cookies do not contain personal information.
Your browser automatically establishes a direct connection to Google’s server. We have no influence on the extent and further use of the data collected by Google through the use of this service. According to Google, Google receives information through the integration of these services that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your user account. Even if you are not registered with Google or not logged in, it is possible that the provider may obtain and store your IP address.
In addition, cookies allow us to understand whether you perform certain actions on our website after viewing one of our ads on Google or another platform or after clicking on it (conversion tracking) (“Floodlight”). Google uses this cookie to understand the content with which you have interacted on our websites to later send you targeted advertising.
You can prevent the tracking procedure by adjusting your browser software accordingly (e.g., disabling third-party cookies), disabling cookies for conversion tracking in your browser settings, blocking cookies from the domain www.googleadservices.com in your browser settings, or opting out of interest-based ads from providers participating in the self-regulatory campaign “About Ads” through the link http://www.aboutads.info/choices or the link http://www.google.com/settings/ads/. Please note that in this case, you may not be able to fully use all functions of this offer.
For more information on the Google Marketing Platform, visit https://marketingplatform.google.com/. You can also find additional information at the Network Advertising Initiative (NAI) at http://www.networkadvertising.org/. The legal basis for data processing is Article 6(1)(f) of the GDPR.
13. Security Measures
To protect your personal data from unauthorized access, we have equipped our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer,” and TLS stands for “Transport Layer Security,” encrypting the communication of data between a website and the user’s device. You can recognize active SSL or TLS encryption by a small padlock icon displayed on the left side of the browser’s address bar.
Your Rights
14. Data Subject Rights
In connection with the data processing described by our company, you have the following data subject rights:
14.1 Information (Art. 15 GDPR)
You have the right to request confirmation from us about whether we process personal data concerning you. If this is the case, you have the right to information about this personal data and the additional information listed in Art. 15 GDPR under the conditions specified therein.
14.2 Rectification (Art. 16 GDPR)
You have the right to demand the correction of your personal data without undue delay and, if necessary, the completion of incomplete personal data.
14.3 Erasure (Art. 17 GDPR)
You have the right to request the immediate deletion of personal data concerning you if one of the reasons listed in Art. 17 GDPR applies, e.g., if your data is no longer needed for the purposes pursued by us.
14.4 Restriction of Processing (Art. 18 GDPR)
You have the right to request us to restrict processing if one of the conditions listed in Art. 18 GDPR is met, e.g., if you dispute the accuracy of your personal data, and processing is restricted for the period that allows us to verify the accuracy of your data.
14.5 Data Portability (Art. 20 GDPR)
Subject to the conditions set out in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
14.6 Withdrawal of Consent (Art. 7 Abs. 3 GDPR)
You have the right to withdraw your consent to processing based on consent at any time. The withdrawal is effective from the moment it is exercised. In other words, the processing does not become retrospectively unlawful due to the withdrawal of consent.
14.7 Complaint (Art. 77 GDPR)
If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can exercise this right with a supervisory authority in the EU member state of your habitual residence, place of work, or the place of the alleged infringement.
14.8 Prohibition of Automated Decisions/Profiling (Art. 22 GDPR)
Decisions that have legal effects on you or significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making, including profiling, regarding your personal data.
14.9 Objection (Art. 21 GDPR)
If we process personal data about you based on Art. 6(1)(f) of the GDPR (for the protection of legitimate interests), you have the right to object under the conditions set out in Art. 21 GDPR. However, this only applies if there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms. We do not have to cease processing if it serves to assert, exercise, or defend legal claims. In any case, even without a specific situation, you have the right to object at any time to the processing of your personal data for direct marketing.
As of: June 2024