Privacy Policy

Sect. 1 General

We will process your personal data (e.g. title, name, address, e-mail address, phone number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.

Sect. 2 Contact us

(1) Purpose of data processing
Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.
(2) Legal basis
a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1)
b) of the GDPR.
c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.
You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.
(3) Legitimate interest
Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).
(4) Recipient categories
Provider of hosting, service provider for direct marketing.
(5) Duration of storage
Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified.However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. § 257 HGB, § 147 AO).
(6) Right of revocation
You have the right to revoke your consent for processing at any time in compliance with your consent.

Sect. 3 Web Analysis with Google Analytics

(1) Purpose of data processing
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. According to Google, Google Analytics 4 does not log or store individual IP addresses. No precise location data is provided in Analytics. Instead, the following metadata is derived from IP addresses: "city" (and the derived latitude and longitude of the city), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). For accesses originating from the EU, IP addresses are only used to derive location data and are immediately deleted afterwards. They are not logged, are not accessible, and are not used for any other use cases. When collecting measurement data in Analytics, all IP searches take place on EU-based servers before the traffic is forwarded to Analytics servers for processing. These servers are also located outside the EU.We use the User ID function. This feature allows us to assign persistent IDs to sessions and thereby analyze user behavior across devices. The use of IDs does not involve the use of unauthorized personally identifiable information, and user IDs do not contain information that could be used by third parties to determine a user's identity. Based on the user IDs, we can create remarketing target groups. However, Analytics only collects the user ID and device ID for the last device associated with a logged-in user.On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.
(3) Legitimate interest
Our legitimate interest is the statistical analysis of user behavior for optimization and marketing purposes. For your interest in data protection, this website uses Google Analytics with the extension "anonymizeIP()", so that the IP addresses are only processed in an abridged form in order to exclude direct personal reference.(4) Recipient categoriesGoogle and its partners.
(5) Transfer to a third country
Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The basis for the transfer of personal data from the EU to the US is the EU-U.S. Data Privacy Framework.
(6) Duration of Storage
14 months
(7) Right of revocation
You can revoke your consent at any time with effect for the future via our cookie banner or via our website.You can prevent the installation of the cookies in your browser settings. If you choose to change your settings, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: optout

(8) Further cookie information
Name: _ga
Wert: 2.1326744211.152312691195-5
Usage: By default, analytics.js uses the _ga cookie to store the user ID. It is generally used to differentiate between website visitors.
Expiry date: after 2 years

Name: _gid
Wert: 2.1687193234.152312691195-1
Purpose: The cookie is also used to distinguish website visitors.
Expiry date: after 24 hours

Name: _gat_gtag_UA_
Value: 1
Purpose: Used to reduce the number of visits. If Google Analytics is provided via the Google Tag Manager, this cookie is given the name _dc_gtm_ .
Expiry date: after 1 minute
Note: This list is not exhaustive, as Google is constantly changing the selection of its cookies. The aim of GA4 is also to improve data protection. The tool therefore offers several options for controlling data collection. For example, we can determine the storage period ourselves and control data collection.

Here we give you an overview of the most important types of data that are collected with Google Analytics:
- Heatmaps: Google creates so-called heatmaps. Heatmaps show exactly the areas that you click on. This gives us information about where you "move" on our site.
- Session duration: Google defines session duration as the time you spend on our site without leaving it. If you are inactive for 20 minutes, the session is automatically ended.
- Bounce rate: A bounce is when you only view one page on our website and then leave it again.
- Account creation: If you create an account on our website or place an order, Google Analytics collects this data.
- Location: IP addresses are not logged or stored by Google Analytics. However, IP address derivations are used for location data shortly before the IP address is deleted.
- Technical information: Technical information includes your browser type, your internet service provider or your screen resolution.
- Source of origin: Google Analytics and we are of course also interested in which website or which advert brought you to our site.
Other data includes contact details, any ratings, the playing of media (e.g. when you play a video on our site), the sharing of content via social media or adding to your favourites. This list does not claim to be exhaustive and only serves as a general guide to data storage by Google Analytics.

Google has servers all over the world. You can find out exactly where Google's data centres are located here: https://www.google.com/about/datacenters
Your data is distributed across various physical data carriers. This has the advantage that the data can be accessed more quickly and is better protected against manipulation. Every Google data centre has appropriate emergency programs for your data. If, for example, Google's hardware fails or natural disasters paralyse the servers, the risk of service interruption at Google remains low.The storage duration of the data depends on the properties used. The storage period is always defined separately for each individual property. Google Analytics offers us four options to control the storage period:2 months: this is the shortest storage period.14 months: By default, GA4 stores the data for 14 months.26 months: You can also store the data for 26 months.
Data is only deleted when we delete it manually.There is also an option for the data to be deleted only if you no longer visit our website within the period we have selected. In this case, the retention period is reset each time you visit our website again within the specified period.After the specified period has expired, the data will be deleted once a month. This retention period applies to your data linked to cookies, user IDs and ad IDs (e.g. DoubleClick domain cookies). Reporting results are based on aggregated data and are stored independently of user data. Aggregated data is the combination of individual data into a larger unit.

Sect. 4 Information about cookies

(1) Purpose of data processing
This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system and only serve the functionality of the website. Other cookies remain stored permanently and recognize your browser on your next visit to improve the usability of the website.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR. You have expressly given your consent to the use of cookies on our website as follows: Consent to Cookies & Data processing On this website we use cookies and similar functions to process end device information and personal data. The processing is used for purposes such as to integrate content, external services and elements from third parties, statistical analysis/measurement, personalized advertising and the integration of social media. Depending on the function, data is passed on to up to 8 third parties and processed by them. This consent is voluntary, not required for the use of our website and can be revoked at any time using the icon on the bottom left.
(3) Duration of storage
The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.
(4) Right of revocation
If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website.Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.

Sect. 5 Newsletter

(1) Purpose of data processing
When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links.You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: If you would like to subscribe to our newsletter, the data requested in the respective input mask will be transmitted to us as the responsible party. Our newsletter registration is made in a so-called double opt-in procedure. This means that after registering, an e-mail will be sent confirming your registration. This confirmation is necessary in order to prevent anyone from registering with an unusual e-mail address. The user’s IP address and the date and time of registration are stored when registering for the newsletter. This serves to prevent misuse of the services or the e-mail address of the person concerned. The data is not passed on to third parties. An exception does exist if there is a legal obligation to pass on the data. The data is used exclusively for sending the newsletter. You may cancel the newsletter subscription at any time. Likewise, the storage consent of your personal data may be revoked at any time for the future. You will find a corresponding link in each newsletter for this purpose. The legal basis for the processing of data after the user has subscribed to the newsletter is Art. 6 para. 1 lit. a) DSGVO if the user has given his consent.
(2) Legal basis
The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.
(3) Recipient categories
if necessary: newsletter provider
(4) Duration of storage
Your e-mail address will only be stored for the respective duration of your registration.
(5) Right of revocation
You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: We use PipeDrive to send our newsletter. Among other things, PipeDrive is used to organize the dispatch of newsletters. For this purpose, the data you provide is stored on PipeDrive servers and from there the dispatch to your e-mail address is organized. For the purpose of analysis, the e-mails sent with PipeDrive contain a so-called tracking pixel, which contact PipeDrive’s servers when the e-mail is opened. In this way, it can be determined whether a newsletter message has been opened. Furthermore, with the help of PipeDrive, we can determine whether and which links in the newsletter message are clicked. All links in the e-mail are so-called tracking links, which count your clicks. If you do not wish an analysis by PipeDrive, you must discontinue the newsletter by clicking here. For this purpose, we provide a corresponding link in every newsletter message.

Sect. 6 Your rights as a data subject

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:  
1. Right to information
You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.
2. Right to rectification 
If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.
3. Right to erasure
You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.
4. Right to restriction of processing
You have the right to restrict the processing your personal data under Article 18 of the GDPR.
5. Right to data portability
You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.
6. Right to revoke the consent given under data protection law
You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.
7. Right to lodge a complaint with a supervisory authority
If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in the Member State of your habitual residence, place of work or place of the alleged infringement).  

Please also note your right of objection under Article 21 GDPR:
a) In general: reasoned objection required
If the processing of personal data concerning, you take place in order- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)or- to safeguard the public interest (legal basis: Article 6 (1e) GDPR), you are entitled to object to the processing at any time for reasons arising from your situation; this also applies to profiling based on the provisions of the GDPR. In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
b) Special case of direct marketing: simple objection is sufficient
If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.  

Responsible for data processing:
DATA FLOSS GmbH
Mariendorfer Damm 1
12099 Berlin Germany
Phone: +49 30 419 59 398
info@datafloss.co  

This document was created and is updated with technology from janolaw GmbH.

This document was created and is updated with technology from janolaw GmbH.