1. General
1.1 What is personal data
Personal data is information that reveals or may reveal the identity of the user. We adhere to the principle of
Data avoidance. As far as possible, the collection of personal data is avoided.
1.2 Handling of personal data
Personal data is used exclusively for the purpose of establishing the contract, structuring the content, implementing or processing the contractual relationship (Art. 6 I b GDPR). In addition, personal data will only be processed if we have received your consent (Art. 6 I a GDPR). They will generally not be passed on to third parties. The data will only be passed on to the shipping company commissioned with the delivery to fulfill the contract, insofar as this is necessary to deliver the ordered goods. In order to process payments, the payment data required for this will be passed on to the credit institution responsible for the payment and, if necessary, to the commissioned and selected payment service provider. Your personal data will be processed exclusively within the EU.
1.3 Usage Data
When you visit the website, general technical information is collected. These are the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and saved for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.
1.4 Registration Data
Registration is required to fully use the functions of our website. The registration data is collected through your relevant entries and used for the specifically stated purpose in accordance with your consent (Art. 6 I a GDPR).
1.5 Duration of storage
After the purpose for which the data was collected has ended, we will only store your personal data for as long as this is necessary due to legal (particularly tax) regulations.
2. Your rights
2.1 Information
You can request information from us as to whether we process your personal data and, if this is the case, you have the right to information about this personal data and the further information specified in Article 15 GDPR.
2.2 Right to rectification
You have the right to correct incorrect personal data concerning you and, in accordance with Art. 16 GDPR, you can request the completion of incomplete personal data.
2.3 Right to deletion
You have the right to request that the personal data concerning you be deleted immediately. We are obliged to delete them immediately, especially if one of the following reasons applies:
•Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
•You withdraw your consent on which the processing of your data was based and there is no other legal basis for the processing.
•Your data has been processed unlawfully.
The right to deletion does not exist if your personal data is necessary to assert, exercise or defend our legal claims.
2.4 Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if •Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed. •the processing is unlawful and you refuse deletion and instead request restriction of use
•we no longer need the data, but you need it to assert, exercise or defend legal claims, you have objected to the processing of your data and it is not yet clear whether our legitimate reasons outweigh your reasons.
2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without hindrance from us, provided that the processing is based on your consent or based on a contract and we process it using automated procedures.
2.6 Right of withdrawal
If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General and right of appeal
Exercising your above rights is generally free of charge for you. If you have any complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer, directly.
3. Data security
3.1 Data security
All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and distribution.
3.2 Sessions and cookies
To operate the website, we can use cookies or server-side sessions in which data can be stored. Cookies are also used, for example, for a personal greeting with the member name. Cookies are files that are stored on your hard drive by a website in order to automatically recognize this computer the next time you visit the website and thus be able to adapt the use of the website to you. Some of the cookies used are deleted after the end of the browser session. These are so-called session cookies. Other cookies remain on your device and enable the browser to be recognized when you later visit our website (persistent cookies). You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Please note that you may not be able to use some functions of this website if cookies are disabled. We ensure that no personal data is acquired from sessions or through cookies and cookies are only used if necessary for the website. The balance therefore shows that there are no overriding interests on your part (Art. 6 I f GDPR).
4. Newsletters
If you register for our newsletter, we will use the data required for this or provided separately by you to regularly send you our email newsletter. You can unsubscribe from the newsletter at any time and can do so either by sending us a message via the contact options provided in the legal notice or via the link provided in the newsletter. We use the services of the third-party provider Mailchimp for our newsletter (see 5.3).
4.1 Consent to receiving advertising newsletters by email
Purpose of data processing/legal basis: You have the opportunity to order one of our newsletters via various channels (this website, competition pages, promotions, in writing at an event). The legal basis for data processing when sending newsletters is your consent in accordance with Art. 6 Para. 1 a) GDPR. The purpose of data processing when ordering the newsletter is to inform newsletter subscribers about goods, competitions, promotions, surveys and services. After sending the order form, you will receive an email from us with a confirmation link (double opt-in procedure). If you click on the link contained therein within 7 days, you will be registered for the respective newsletter.
By confirming your registration, you confirm your consent to the processing of your data for the purposes stated in the declaration of consent. Unfortunately, we cannot send you any newsletters without your consent or activation of the confirmation link. If you register for the free newsletter, you agree that Grafschaft Manufaktur GmbH may process your email address and the country in which you live as mandatory information in order to be able to send you the newsletter relevant to your country by email and to inform you in this newsletter about goods, competitions, promotions, surveys and services from Grafschaft Manufaktur GmbH. You further agree that we may store the information where you started the newsletter ordering process (for example from the contact form, a competition form or directly via the newsletter registration page) in order to be able to optimize the newsletter ordering options. If you voluntarily provide optional information about yourself when registering (title, first name, last name), you consent to us using this data to add a personal salutation to your newsletter.
You can revoke your consent to subscribe to the newsletter at any time with effect for the future by clicking on the corresponding unsubscribe link in one of the newsletters or by sending an email to newsletter@grafschaft-manufaktur.de. You will then no longer receive any newsletters.
Recipients/categories of recipients: The data collected as part of the newsletter order is generally only accessible to the department within Grafschaft Manufaktur GmbH, which is responsible for processing and supporting the newsletter dispatch. If external processors are used to send the newsletter, they are contractually obliged in accordance with Art. 28 GDPR and have been checked accordingly to ensure that appropriate organizational and technical security measures are in place.
Storage period/criteria for determining the storage period: If you revoke your consent to receive one or more different newsletters, the data in your subscriber profile will be blocked immediately and then deleted. As a result, you will no longer receive any personalized advertising (e.g. personalized newsletters, info emails, etc.).
5. Third Party Services
5.1 Google Analytics
This website uses Google Analytics, a web analysis service from Google, operated by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”) and uses this web analysis service to collect and store data from which usage profiles are created using pseudonyms to be created. The usage profiles created in this way are used to evaluate visitor behavior in order to design and improve the offering presented on this website in line with needs. Google Analytics uses so-called “cookies”, small text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The usage profiles maintained under a pseudonym will not be merged with the user’s personal data without the user’s express and separately declared consent. You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google using the following link (http:// tools.google.com/dlpage/gaoptout?hl=de) download and install the available browser plugin. You can view Google’s data protection information at http://www.google.de/intl/de/policies/privacy/. Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at http://www.google.com/intl/de/analytics/privacyoverview.html. We would like to point out that Google Analytics on this website has been expanded to include the code “anonymizeIp” to ensure the anonymized collection of IP addresses (so-called IP masking).
5.2 Social media links and social sharing
We have our own social media pages for third-party providers that can be reached via links from this website. By using the links, you will reach the respective third-party websites (e.g. Facebook, Twitter, Google+) and can also share our content. As soon as you have accessed the third-party website, you are responsible for the respective third-party provider, so that their data protection declaration and their statements on data use also apply. We have no influence on this, but in order to avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link so that usage profiles cannot be created by the third-party provider simply by using the link.
5.3 Use of MailChimp
Our email communication is handled using “MailChimp”, a platform from the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. Your email address and your other data described in this information will be stored on MailChimp’s servers in the USA. MailChimp uses this information to send and evaluate emails on our behalf. Furthermore, MailChimp can, according to its own information, use this data to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for economic purposes to determine which countries the recipients come from. MailChimp does not use the data of our email recipients to write to them ourselves or to pass them on to third parties. MailChimp is certified under the US-EU data protection agreement “Privacy Shield” and is therefore committed to complying with EU data protection regulations. We have also concluded a “data processing agreement” with MailChimp. This is a contract in which MailChimp undertakes to protect our users’ data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties. You can view MailChimp’s privacy policy at https://mailchimp.com/legal/privacy/.
6. Affiliate links and advertising
We place affiliate and advertising links or banners to certain third-party providers on our website. With these links/banners we generate income (advertising cost reimbursements) when purchases are made from the respective third-party provider via this link/banner or when their site is accessed. The third-party provider can use cookies in order to be able to find the origin of the orders or the access. However, this has no impact on the use of our website and in particular does not constitute an obligation to purchase. Affiliate and advertising links or banners are only intended to make your purchase easier. In addition, the respective data protection regulations of the third party providers apply.
7. Competitions
Purpose of data processing/legal basis: You have the opportunity to take part in various competitions on our website and in our newsletter. Unless otherwise specified in the specific data protection principles of the respective competition or you have not given us further express consent, the personal information you provide to us as part of your participation in the competition will be used exclusively for the processing of the competition (winner determination, winner notification, sending of the profit). If necessary, the winners will be announced anonymously on Instagram or Facebook (e.g. “Peter L. from Munich won”). If you participate, the legal basis for data processing in the context of competitions is Article 6 Paragraph 1 b) EU GDPR. If a further declaration of consent is submitted as part of a competition, Art. 6 Para. 1 a) GDPR is the legal basis for data processing based on consent. If you have given your consent as part of a competition, you have the option to revoke this consent at any time with effect for the future. In these cases, further details are regulated in the special data protection principles of the competition in question.
Recipients/categories of recipients: The data collected as part of competitions is generally only accessible to the department within the county service that carried out the specific competition. It will only be passed on to third parties if this is absolutely necessary for the implementation of the competition or the sending of the prize (e.g. prize dispatch by the sponsor of a competition) or if you have given us your express consent to do so.
Storage period/criteria for determining the storage period: After the competition ends and the winners are announced, the participants’ data will be deleted. In the case of non-cash prizes, the winners’ data will be kept for one year after the winners have been announced in order to be able to do so if necessary. to be able to carry out a profit settlement.
8. Hotjar
We use Hotjar to better understand the needs of our users and to optimize the offering and experience on this website. Using Hotjar’s technology, we get a better understanding of our users’ experiences (e.g. how much time users spend on which pages, which links they click, what they like and don’t like, etc.) and this helps us tailor our offering based on our users’ feedback to align. Hotjar works with cookies and other technologies to collect data about the behavior of our users and their devices, in particular the IP address of the device (is only recorded and stored in anonymized form during your use of the website), screen size, device type (unique device identifiers ), information about the browser used, location (country only), preferred language for viewing our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
For more information, see the ‘about Hotjar’ section on Hotjar’s help page.
9. Contact us
To contact us regarding data protection, please feel free to contact us using the contact options below. Responsible person within the meaning of the GDPR:
Grafschaft Manufaktur GmbH
Alolfstr. 15
61350 Bad Homburg v.d.H.
Email: kontakt@grafschaft-manuf.de
