Privacy Policy

Information about the processing of your data

We have an obligation in accordance with Article 12 GDPR (General Data Protection Regulation; hereinafter: GDPR) to inform you about the processing of your data when you use our website. We take the protection of your personal data very seriously and this privacy policy provides you with information about the processing of your data as well as your legal rights in this regard.

We reserve the right to amend the privacy policy with effect for the future, in particular, to develop the website, for the use of new technologies or when legal bases or the corresponding case law change.

We recommend that you read the privacy policy from time to time and keep a printed copy with your documents.

Scope of application

The privacy policy applies to all websites of www.meissen.com/de. It does not extend to any possibly linked websites or Internet presences of other providers.

Responsible provider

The processing of personal data within the scope of application of this Privacy Policy is the responsibility of:

Staatliche Porzellan-Manufaktur Meissen GmbH
Talstraße 9, 01662 Meißen
Telephone: +49 (0) 3521 / 4680; fax: +49 (0) 3521 / 468800; email: info@meissen.com

represented by:

Dr. Tillmann Blaschke

Questions about data protection

Should you have any queries about data protection with regard to our company or our website, you may contact our data protection officer:

Mandatory information on the data protection officer pursuant to Article 37(7) of the General Data Protection Regulation (GDPR):
Spirit Legal LLP Rechtsanwälte
Solicitor and Data Protection Officer
Peter Hense

Postal address:

Data Protection Officer
c/o Staatliche Porzellan-Manufaktur Meissen GmbH, Talstraße 9, 01662 Meißen

Contact via encrypted online form:

Contact Data Protection Officer

Security

We have taken comprehensive technical and organisational precautionary measures to protect your personal data from unauthorised access, misuse, loss or other accidental events.   For this purpose, we regularly review our security measures and improve to the latest state of the art.

Your rights

You have the following rights against us with regard to the personal data concerning you:

• right of access, Article 15 GDPR),
• right to rectification (Article 16 GDPR) or erasure (Article 17 GDPR),
• right to restriction of processing, (Article 18 GDPR),
• right to object to processing, (Article 21 GDPR),
• right to withdraw your consent (Article 7(3) GDPR),
• right to receive the data in a structured, commonly used and machine-readable format (data portability”) as well as the right the right to transmit those data to another responsible organisation, if the conditions of Article  20(1)(a) and (b) GDPR have been met (Article 20 GDPR),

You can establish your rights by sending a notification to the contact details specified in section “Responsible provider” or to the Data Protection Officer appointed by us.

You also have the right to lodge a complaint with a supervisory authority about our processing of your personal data (Article 77 GDPR).

Use of the website, access data

In general, you may use our website for purely informational purposes without disclosing your identity.  When the individual pages of the website are called up in this sense, access data is transmitted to our webspace provider only to enable the display of the website. They are the following data:

• type and version of browser
• operating system used
• language and version of the browser software
• host name of the accessing terminal device
• IP address
• website from which the request originates
• content of the request (specific page)
• time of the server request
• access status/HTTP status code
• referrer URL (the site previously visited)
• quantity of data transferred
• time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP-address is necessary to enable the delivery of the website to your computer in technical terms. The processing of your IP address is, therefore, required for the duration of the session. The legal basis if this processing is Article 6(1), sentence 1 (f) GDPR.

The access data is not used for the identification of individual users and not combined with other data sources. The access data will be deleted when it is no longer required to achieve the purpose of their processing. This is the case when you are ending your visit to the website, where the data is recorded for the provision of the website.

The IP addresses are stored in log files to ensure the functionality of the website. The data also help us to optimise the website and to ensure the security of our IT system. The data is not analysed for marketing purposes in this context. In general, the data is deleted after no longer than seven days, in individual cases, data may be processed beyond this period. In this case the user’s IP address will be deleted or distorted so that its assignment to the accessing client is no longer possible.

Cookies

In addition to the above-mentioned access data, so-called cookies are stored in the Internet browser of the terminal device you are using when you visit the website.

Contacting our company

When you contact our company, e.g. via email or via the contract form on the website, the personal data you have provided is processed by us in order to answer you query.

To deal with your enquiry via the contact form on the website, it is essential that you provide your name or a pseudonym as well as a valid email address. The address and phone number are optional. When the message is sent to us, the following data is also processed:

• IP address
• date/time of registration

The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR or Article 6(1), sentence 1 (b) GDPR, if the purpose of the contact is the formation of a contract.

Processing of the personal data from the input screen is used by us solely for the purpose of processing the contact. In the case of a contact via email, here also lies the required legitimate interest in processing the data. Other personal data processed during the dispatching process assist us in preventing misuse of the contact form and in ensuring the security of our IT system.

In each case, no data is transferred to third parties in connection with this. The data is exclusively processed for the purpose of processing the conversation. We delete the data accrued in this connection, after processing is no longer required, or we restrict the processing to the existing retention periods prescribed by law.

Processing and disclosure of personal data for contractual purposes

We process your personal data if and insofar as this is required for the initiation, conclusion, implementation and/or termination of a legal transaction with our company. The legal basis for this is Article 6(1), sentence 1 (b) GDPR.

After the purposes have been achieved (e.g. contract implementation), the personal data is locked to prevent further processing, insofar as we do not have your consent (e.g. consent for the processing of the email address to send electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or due to legitimate interests (e.g. storage for the enforcement of rights), are entitled to further storage and, in the relevant context, to the necessary processing.

Your personal data is passed on insofar as this is

• necessary for the conclusion, implementation or termination of legal transactions with our company (e.g. where the data is disclosed to a payment service provider / a shipping company for the implementation of a contract with you), (Article 6(1), sentence 1 (b) GDPR, or where
• a subcontractor or agent exclusively used to provide the products or services requested by you requires this data (such auxiliaries are only authorised to process your data to the extent that this is necessary to provide the product or service, unless you have been expressly informed otherwise by us) or
• an enforceable administrative order (Article 6(1), sentence 1(c) GDPR exists, or
• an enforceable judicial order exists (Article 6(1), sentence 1(b) GDPR, or where
• we have an obligation to that effect, according to law (Article 6(1), sentence 1(c) GDPR, or
• the processing is necessary to protect the vital interests of the data subject or another natural person (Article 6(1), sentence 1(d) GDPR, or
• we are authorised or even obliged to disclosure to pursue prevailing legitimate interests (Article 6(1), sentence 1(f) GDPR.

Your personal data shall not be disclosed further to other persons, companies or bodies, unless you have effectively consented to such disclosure.  The legal basis for the processing in this case is Article 6(1), sentence 1(a) GDPR.

Processing and disclosure of personal data in the online shop

If you wish to place an order or reservation in our online shop, it is necessary for the initiation and conclusion of the contract  that you provide your personal data such as your name, your address and your email address. The mandatory details required for the handling of the order and the contract are marked separately, further information is optional. We process your data for the purpose of handling the order, in the process we are passing on in particular payment data to your chosen payment service providers or our bank. The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR. To prevent access to your personal data by unauthorised third parties, the order process on the website is encrypted using SSL/TLS technology.

You can voluntarily set up a customer account, where we store your data for subsequent further visits to the website. The data provided by you when setting up the customer account is processed. After successful registration, you can edit or delete any other data yourself, including your customer account.

We delete the data accrued in this connection, after the storage is no longer required, or we restrict the processing, if there are existing retention periods prescribed by law. Due to mandatory legal commercial and tax regulations, we have a duty to retain your data on your address, payment and order for a period of ten years. Two years after the termination of the contract, we limit the scope of processing to the compliance with existing legal obligations.

Registration/password-protected area of the website

If you wish to use the password -protected area on our website, you must register with the following details:

• email address,
• name
• Address
• Telephone number
• username
• chosen password

It is not mandatory to provide your real name, you may use a pseudonym. 

Further, the following data is processed at the time of registration:

• IP address
• date/time of registration

The data will be deleted as soon as it is no longer required to achieve the purpose of their processing. This applies to the data collected during the registration process, when the registration on the website is cancelled or amended.

The following functions are available to you in the password-protected area:

• edit your profile data,
• view orders/reservations,
• manage, amend or cancel your newspaper subscription.

Insofar as you are using the password-protected area of the website, e.g. for the processing of your profile data or view orders or reservations you have placed, we also process your personal data necessary to initiate or perform the contract, in particular address data, data regarding the method of payment. The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose of their processing and there are no legitimate interests to oppose erasure.  Due to mandatory legal commercial and tax regulations, we have a duty to retain your data on your address, payment and order for a period of ten years. Two years after the termination of the contract, we limit the scope of processing to the compliance with existing legal obligations.

Insofar as you have provided further optional data (e.g. regarding interests, details on size, age, gender, children, preferences, instructions), we process your data that are not required for the initiation or performance of the contract, as long as you use the password-protected area, and if you do not delete the data yourself beforehand. Our objective is the optimisation of the website for you as a user. The legal basis is Article 6(1), sentence 1 (f) GDPR.

Email marketing

Advertising to existing clients

We reserve the right to process the email address you have provided to us during the registration/order/reservation in accordance with the legal provision for the purpose of sending you the following contents by email, following the performance of the contract, provided that you have not already objected to such processing of your email address:

• further interesting offers from our portfolio,
• Events held by our company,
• technical information,
• sending our catalogue,
• enquiries regarding special requests,
• overview of potential recreational offers,
• information on how to reach us by public transport.

The legal basis for this processing is Article 6(1), sentence 1 (f) GDPR. The above-mentioned processing serves to provide customer care and to improve our service features. We delete your data if you cancel the newsletter subscriptions, however, no later than two years after termination of the contract.

Newsletter

You have the option to subscribe to our email newsletter on the website, which provides regular information on the following:

• offers from our portfolio,
• events held by our company,
• offers (also events) by third parties, to the extent that you have given consent to this.
• new articles/collections,
• special offers/offers limited in time

To receive the newsletter, the following personal data is required.

• recipient (name or pseudonym)
• valid email address

The subscription to our email newsletter is submitted via the double opt-in procedure. Following the entry of the data marked as required, we send you an email to the email address you have provided, where we request your express confirmation of the newspaper subscription (by clicking on a confirmation link (“confirm” link)). This is to ensure that you actually wish to receive our email newsletter. If the confirmation is not provided within 24 hours, we block the information sent to us and automatically delete such information after no later than one month.

Further, the following data is processed at the time of the subscription:

• IP address
• date/time of the subscription for the newsletter,
• time of your confirmation of the “confirm” link.

We process your IP address, the time of the newspaper subscription as well as the time of your confirmation, in order to document your newspaper subscription and to prevent the misuse of your personal data. The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR. We process such data until the expiry of two years after termination of the contract. Insofar as the newsletter subscription is made outside of a contract, we process this data until two years after the application process have expired. We will delete this data when the newsletter subscription ends.

After your confirmation, we process the email address and name/pseudonym of the recipient concerned for the purpose of sending our email newsletters.
The legal basis for the processing is Article 6(1), sentence 1(a) GDPR. We will delete this data when you cancel the newsletter subscription.

Please note that we evaluate your user behaviour when we send the newsletter. For the purpose of such evaluation, the emails we sent contain so-called web beacons or tracking pixels, which are one-pixel image files integrated in our website. For the evaluations, we link the data mentioned in the section “Access data” and the web beacons to your email address and an individual ID. Links contained in the newsletter also contain this ID.

With the data obtained, we create a user profile to tailor the newsletter to your individual interests. In the process, we record when you read our newsletter, which links you are clicking in these newsletters and thus establish your personal interests. We link this data with your activities on our website. The information will be processed as long as you subscribe to the newsletter. After cancellation of the newsletter, we process the data anonymously and purely for statistical reasons.

This enables us to evaluate the use and optimisation of email advertising we sent to you. The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR.

Email marketing service “Mailingwork”

We use Mailingwork for the dispatch of newsletters. The provider is Mailingwork GmbH, Birkenweg 7, 09569 Oederan. Mailingwork is a service facilitating the organisation and analysis of the newsletter dispatch. The data submitted by you (e.g. email address) for the purpose of subscribing to the newsletter are stored on Mailingwork servers in Germany.

Our newsletters sent via Mailingwork enables us to analyse the behaviour of the newsletter recipients. Among other things, we can analyse how many recipients have opened the message containing the newsletter and how often which link was clicked in the newsletter. By means of so-called conversation tracking, we can also analyse whether an action defined beforehand (e.g. purchase of a product on our website) took place after the link in the newsletter has been clicked.

The evaluation of the information mentioned serves to recognise the reading habits of the recipients, to enable us to improve how we match and disseminate the contents of our newsletters correspondingly. The legal basis for the processing is Article 6(1), sentence 1(f) GDPR. We process such data until the expiry of two years after termination of the contract. Insofar as the newsletter subscription is made outside of a contract, we process this data until two years after the application process have expired. We will delete this data when the newsletter subscription ends. We neither have any knowledge nor influence on the duration of the storage at Mailingwork. Further information is available in the privacy policy by Mailingwork at: https://mailingwork.de/datenschutz.

Payment Service Provider (PSP)

PayPal

We offer payment via PayPal on our website. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: “PayPal”).

If you select payment via PayPal, the payment details you have entered are transmitted to PayPal. The basis of the transmission of your data to PayPal is Article 6(1), sentence 1(b) GDPR (Processing for the performance of a contract). We neither have any knowledge nor influence on the duration of the storage at PayPal.

Transfer of personal data during payment by credit card

Your personal data is transferred categorically only to the extent that it is necessary to implement the contract. Insofar as required for the payment transaction, we transfer the payment data that are necessary for this purpose to the credit institution assigned to handle your payment, or if appropriate, the service provider for payment and invoicing instructed by us.

The data is processed on the basis of Article 6(1), sentence 1(b) GDPR (Processing for the performance of a contract). The data required for processing the payment are securely transmitted via the “SSL” procedure and processed exclusively for handling the payment. We delete the data accrued in this connection, after the storage is no longer required, or we restrict the processing, if there are existing retention periods prescribed by law.

Transfer of personal data for the purpose of law enforcement/address enquiry/collection

If a legitimate interest exists in accordance with Article 6(1), sentence 1 (f) GDPR, in the case of non-payment, we reserve the right to disclose the data submitted at the time of the order / reservation to a solicitor and/or and external company (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss), for the purpose of address enquiry and/or law enforcement.

We also pass on your data, if appropriate, if this is necessary to exercise our rights as well as the rights of companies associated with us, our cooperation partners, our employees and/or the users of our website. We do not under any circumstances sell or lease your data to third parties. The transfer of this data is made on the basis of Article 6(1), sentence 1 (f) GDPR.

We delete the data accrued in this connection, after the storage is no longer required, or we restrict the processing, if there are existing retention periods prescribed by law.

Payment Service Provider (PSP)

PayOne

For payment processing we use BS PayOne GmbH for all payment methods, Lyoner Strasse 9, 60528 Frankfurt/Main, Germany(hereinafter: “PayOne”). . PayOne is therefore the recipient of your personal data collected in connection with the payment process. The legal basis for calling in PayOne is the execution of the contract in accordance with Art. 6 Par. 1 p. 1 lit. b) GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PayOne and only insofar as it is necessary for this. We have no knowledge of the storage time at PayOne and have no influence on it. You can find PayOne's current data protection regulations at: https://www.payone.com/datenschutz/

PayPal

If you select the payment method “Debit via PayPal Plus” or “Credit card via PayPal Plus” during your reservation/order, we transfer the collected personal data to PayPal (Europe) S.àr.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal) for the processing of the payment. The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR.

By means of the transferred data, PayPal creates an invoice and, if appropriate, carries out an identity check and credit check. PayPal has a legitimate interest in the transmission of the personal data of the purchaser and processes these in order to carry out identity checks and credit checks with credit agencies, Article 6(1), sentence 1 (f) GDPR.

These can be bodies named at https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DE and https://www.paypal.com/de/webapps/mpp/ua/third-parties-list?locale.x=de_DE.

During the credit check, mathematical-statistical procedures are used to calculate a rating with respect to the probability of payment default (so-called calculation of a score value). PayPal uses the calculated score value as a basis of its decision on providing the respective payment method. The score value is calculated by using recognised scientific methods.

In addition to the address data, information about previous payment behaviour as well as probability values on the payment behaviour that can be expected in the future are also incorporated. We neither have any knowledge nor influence on the duration of the storage at PayPal.

You can contact PayPal via the following contact form: https://www.paypal.com/de/selfhelp/contact/email/privacy. Further information on the processing of your data by PayPal is available at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#r7.

SOFORT by Klarna

If you select the payment method “SOFORT” during your reservation/order, we transfer the data you have provided to us to Sofort GmbH (Theresienhöhe 12, 80339 München, Germany; Web: https://www.sofort.de/; hereinafter “SOFORT”) for the processing of the payment.

“SOFORT” is a direct transfer procedure, where a transfer can be prepared as early as during the order process and carried out in real time. For this purpose, you are redirected to the website of the payment service provider SOFORT.

The legal basis for the processing is Article 6(1), sentence 1 (b) GDPR. We neither have any knowledge nor influence on the duration of the storage at SOFORT. Further information on the collection and processing of your data by “SOFORT” is available at https://www.sofort.de/datenschutz.html.

Giropay

We offer payment via Giropay on our website. Provider on this payment service is Giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, Germany (hereinafter: “Giropay”).

If you select payment via Giropay, the payment details you have entered are transmitted to Giropay. The basis of the transmission of your data to Giropay is Article 6(1), sentence 1(b) GDPR (Processing for the performance of a contract). We neither have any knowledge nor influence on the duration of the storage at Giropay.

Hosting

We use external hosting services, which deal with the provision of the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. In the process, all data required for the operation and use of our website is processed. 

We use external hosting services for the operation of our website. The use of external host services facilitates an efficient and safe provision of our website. The legal basis for the processing is Article 6(1), sentence 1 (f) GDPR.

Services for statistical, analytical and marketing services

We use services of third-party providers  for statistical, analytical and marketing services. This enables us to provide a user-friendly, optimised use of the website. The third-party providers use cookies to manage their services (see previous section “Cookies). Unless stated otherwise below, personal data is not processed.

Some of the third-party providers offer the option to directly object to the use of the respective service, e.g. by setting an opt-put cookie.

Below, we provide information about the services by external providers we use on our website as well as the purpose and scope of the respective processing in the individual case and about your existing options to object.

Google Analytics

To optimally match our website with your interests, we use Google Analytics, a web analysis service provided by Google. Google Analytics uses so-called  “cookies” (see previous section “Cookies”), which are stored on your computer and enable the analysis of website use. The additionally created information on the use of this website is transmitted to a Google server in the USA and processed there.

If the IP anonymisation on this website is activated, Google will first shorten your IP address within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area. Only in exceptional circumstances is the full IP address transmitted to a Google server in the USA and shortened there. Google will use this information on behalf of us to analyse your usage of the website, to compile reports about website activities and to render other services connected with website usage and Internet usage.

Google does not associate the IP address transmitted by your browser in the context of Google Analytics with other data.

This website uses Google Analytics with the extension „_anonymizeIp()“. Thereby, IP addresses are further processed in their shortened form, to exclude identification of the specific user. To the extent that reference to you is made by the data collected on you, this is immediately excluded, and the personal data is deleted promptly.

We use Google Analytics to analyse and continuously improve the use of our website. By means of the statistics, we can improve our offering and provide a presentation that is more interesting for you as a user. For the exceptional cases, where personal data is transmitted to the USA, Google has agreed to comply with the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework. The legal basis for the processing by Google Analytics is Article 6(1), sentence 1 (f) GDPR. We neither have any knowledge nor influence on the duration of the storage at Google. The Google Analytics cookies are deleted after fourteen months.

Further information on the third-party provider Google is available at:

http://www.google.com/analytics/terms/de.html,

http://www.google.com/intl/de/analytics/learn/privacy.html,

http://www.google.de/intl/de/policies/privacy.

User-based online advertising

Google AdWords conversion

We use the offering by Google AdWords to draw attention to our attractive offers on external websites by means of advertising materials (so-called Google AdWords). We are able to establish how successful the individual advertisement measures are, in relation to the advertising campaign data. We thereby pursue the interest to show you advertising that is of interest to you, to provide a more interesting design for you and to achieve a fair calculation of advertising costs.

These advertising materials are supplied by Google via so-called “Ad Servers”. For this purpose, we use Ad server cookies, whereby certain parameters of performance measurement, such as the overlay of the advertisements, or clicks by the users can be measured. If you reach our website via a Google advertisement, Google AdWords places a cookie in your PC. These cookies usually expire after 30 days and shall not be used to identify you in person. With this cookie, as analytical values, the unique cookie ID, number of Ad impressions per placement (frequency), last impression (relevant for post view conversions) as well as opt-out information (marker that the user no longer wishes to be contacted) are usually stored.

These cookies enable Google to recognise your Internet browser. If a user has visited certain pages of the website of an AdWords client, and the cookie on his computer has not yet expired, Google and the client can see that the user has clicked on the advertisement and was redirected to this site. A different cookie is assigned to each AdWords client. Cookies can, therefore, not be traced via the websites of AdWords clients. Within the scope of the above-mentioned advertising measures, we do not process any personal data ourselves: We merely receive statistical evaluations from Google. By means of these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising measures, in particular, we are not able to identify the users by means of this information.

On the basis of the marketing tools used, your browser automatically establishes a direct connection to the Google server. We do not have any influence on the extent and the further processing of the data that are collected by Google via this tool and, therefore, notify you on the basis of the information available to us: With the integration of AdWords Conversation, Google is notified that you have called up a part of our respective website or clicked on an advertisement by us. If you are registered with one of Google’s services, Google can link the visit to your account. Even if you are not registered with Google or you are not logged in, the provider may be able to obtain and store your IP address.

The legal basis for this processing of your data is Article 6(1), sentence 1 (f) GDPR. We neither have any knowledge nor influence on the duration of the storage at Google.

Further information on data protection at Google is available at: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

Google has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Facebook Custom Audiences

This website also uses the function “Website Custom Audiences” via  the so-called “Facebook Pixel”by Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: “Facebook”).

Consequently, interest-based advertisements (“Facebook Ads”) can be shown to users of the website when they visit the social network Facebook or other websites which use the procedure. We thereby pursue the interest to show you advertising that is of interest to you, in order to provide a more interesting design for you.

On the basis of the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We do not have any influence on the extent and the further processing of the data that are collected by Facebook via this tool and, therefore, notify you on the basis of the information available to us: With the integration of Facebook Custom Audiences, Facebook is notified that you have called up our respective website or clicked on an advertisement by us. If you are registered with one of the services provided by Facebook, Facebook can link the visit to your account. Even if you are not registered with Facebook or you are not logged in, the provider may be able to obtain and store your IP address and further identifiers.

The legal basis for this processing of your data is Article 6(1), sentence 1 (f) GDPR. In this case, we do not store any of your personal data. We neither have any knowledge nor influence on the duration of the storage at Facebook.

Facebook Analytics

For the use of Facebook Analytics, we use the so-called “tracking pixel” by Facebook Inc. (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: “Facebook”) to trace your user behaviour. The information gained by means of the tracking pixel cookie are used only for statistical purposes, are transmitted to us anonymously by Facebook and do not provide any information to personally identify the user. They are, however, linked to your Facebook account, stored and used for Facebook’s own advertising purposes in accordance with Facebook’s Privacy Policy, whereby it is possible that your data is also transferred to partners of Facebook. Even if you are not registered with Facebook or you are not logged in, the provider may be able to obtain and store your IP address and further identifiers.

The processing of your data in this case is based on Article 6(1)(f) GDPR. By using Facebook Analytics, we are pursuing the interest to improve the evaluation of our website improve our service offering. In this case, we do not store any of your personal data. We neither have any knowledge nor influence on the duration of the storage at Facebook. Further information on the Privacy Policy by Facebook can be found at https://de-de.facebook.com/about/privacy/.

Social network plugins

Our website contains social network plugins. These are provided to the following providers:

• Facebook (The provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; http://www.facebook.com/about/privacy/your-info-on-other#applications as well ashttp://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework; hereinafter: “Facebook”)
• Instagram Inc., 1601 Willow Road, Menlo Park, California 94025, USA;
• Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA;
• Twitter Inc.,795 Folsom St., Suite 600, San Francisco, CA 94107, USA (https://twitter.com/privacy. Twitter has agreed to comply with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework);

 The use of plugins is indicated within our website by the above-mentioned logos or by small stylised symbols. 

We offer you the opportunity to communicate directly with the provider of the plugin via the button.  The plugin provider receives the information that you have called up the respective website of our online offering only if you activate the marked field by clicking on it. In addition, the data specified in section “Access data” are transmitted.

According to the respective providers in Germany, Facebook and Xing anonymise the IP address immediately after collection. Therefore, by activating the plugin, your personal data is transmitted from the respective plugin provider and processed there (in case of US-American providers in the USA). As the plugin provider collects data primarily by means of cookies, we recommend that, before clicking on the greyed-out box, you delete all cookies via the security settings of your browser.

We neither have any influence on the collected data and processing, nor do we have knowledge of the full extent of the data processing, the purpose of processing, the storage periods. Likewise, we do not have any information on the deletion of the data collected by the plugin provider.

The plugin provider stores the collected data on you as user profiles and processes these for the purposes of advertising, market research and/or appropriate design of its website. Such evaluation is carried out in particular (also not for logged-in users) for the presentation of needs-based advertisements and to inform other users of the social network of your activities on our website.

The legal basis for the use of plugins is Article 6(1), sentence 1 (f) GDPR. We offer the opportunity to you to interact with the social networks and other users via the plugins, to enable us to improve our offering and to provide you as a user with a more interesting offering.

The data is transferred irrespective of whether or not you have an account with the plugin and whether or not you are logged in such account. If you are logged in with the plugin provider, your data that has been collected by us will be directly linked to your existing account with the plugin provider. If you click the activated button and, for example, link the page, the plugin provider also stores this information in your user account and forwards it also to your contacts.

We recommend that you regularly log out of social network accounts after visits, in particular, prior to activating the button, as this will avoid a link to your profile with the plugin provider.

 

Copyright by Spirit Legal LLP