1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can identify you personally. Detailed information on data protection can be found in our privacy policy below.
Data collection on this website
Who is responsible for collecting data on this website?
Data processing on this website is carried out by the website operator. The operator’s contact details are provided in the “Information about the controller” section of this privacy policy.
How do we collect your data?
Some of your data is collected when you provide it to us. This may include, for example, data you enter in a contact form.
Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data, such as your internet browser, operating system or the time of the page visit. This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour.
What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have consented to data processing, you may withdraw that consent at any time with future effect. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. You further have the right to lodge a complaint with the competent supervisory authority.
You may contact us at any time about these matters or other questions concerning data protection.
2. Hosting
We host the content of our website with the following provider:
All-Inkl
The provider is ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf (hereinafter “All-Inkl”). Details can be found in All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/.
All-Inkl is used on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably as possible. Where appropriate consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Processing on our behalf
We have concluded a data processing agreement for use of the above service. This is an agreement required by data protection law that ensures that the provider processes our website visitors’ personal data only according to our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this takes place.
Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Stat-X Deutschland GmbH
Schivelbeiner Strasse 48
10439 Berlin
Telephone: +49 30 4471 9701
Email: mailbox.de@stat-x.biz
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Retention period
Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you make a justified request for deletion or withdraw consent to processing, your data will be deleted unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law; in the latter case, deletion takes place when those grounds cease to apply.
General information on the legal bases for processing data on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of data under Article 9(1) GDPR are processed. If you explicitly consent to the transfer of personal data to third countries, processing also takes place on the basis of Article 49(1)(a) GDPR. If you have consented to storing cookies or accessing information on your device, for example through device fingerprinting, processing additionally takes place on the basis of section 25(1) TDDDG. Consent may be withdrawn at any time. If your data is required to perform a contract or take pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR. We also process your data on the basis of Article 6(1)(c) GDPR where necessary to comply with a legal obligation. Processing may further be based on our legitimate interest under Article 6(1)(f) GDPR. The following sections of this privacy policy explain the legal bases applicable in each case.
Recipients of personal data
In the course of our business, we work with various external parties. This sometimes requires personal data to be transferred to them. We disclose personal data to external parties only where necessary to perform a contract, where legally required, for example disclosure to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.
Withdrawal of consent to data processing
Many processing operations are possible only with your express consent. You may withdraw consent already given at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)
WHERE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS FOR PROCESSING IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of GDPR infringements, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, or have it provided to a third party, in a commonly used, machine-readable format. If you request direct transfer to another controller, this will take place only where technically feasible.
Access, rectification and erasure
Within the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of processing, and, where applicable, the right to have it corrected or deleted. You may contact us at any time about this or other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time for this purpose. This right applies in the following cases:
- If you contest the accuracy of personal data we hold about you, we generally need time to verify it. During verification, you have the right to request restriction of processing of your personal data.
- If the processing of your personal data was or is unlawful, you may request restriction of processing instead of deletion.
- If we no longer need your personal data but you require it for the exercise, defence or establishment of legal claims, you have the right to request restriction of processing instead of deletion.
- If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. Until it has been established whose interests prevail, you have the right to request restriction of processing of your personal data.
If you have restricted processing of your personal data, that data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address changing from “http://” to “https://” and by the padlock symbol in your browser’s address bar.
When SSL or TLS encryption is enabled, data you transmit to us cannot be read by third parties.
Objection to promotional emails
We hereby object to the use of contact details published under legal-notice obligations for sending advertising and information materials that have not been expressly requested. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.
4. Data collection on this website
Cookies
Our websites use cookies. Cookies are small data packets and do not damage your device. They are stored on your device either temporarily for a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted when your visit ends. Persistent cookies remain on your device until you delete them yourself or your browser deletes them automatically.
Cookies may be set by us (first-party cookies) or by third-party companies (third-party cookies). Third-party cookies allow certain third-party services to be integrated into websites, such as cookies used to process payment services.
Cookies have different functions. Many are technically necessary because certain website functions would not work without them, such as shopping cart functions or video display. Other cookies may be used to analyse user behaviour or for advertising.
Cookies necessary to carry out electronic communications, provide certain functions you request, such as a shopping cart, or optimise the website, such as audience measurement cookies, are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically error-free and optimised manner. Where consent to storing cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of that consent (Article 6(1)(a) GDPR and section 25(1) TDDDG); consent may be withdrawn at any time.
You can configure your browser to inform you when cookies are set, permit them only in individual cases, refuse them in particular cases or generally, and automatically delete them when the browser closes. Disabling cookies may limit this website’s functionality.
This privacy policy explains which cookies and services are used on this website.
Server log files
The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
This data is collected on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website; collecting server log files is necessary for this purpose.
Contact form
If you send enquiries through the contact form, we store the information in the form, including the contact details you provide, to process the enquiry and any follow-up questions. We do not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where requested; consent may be withdrawn at any time.
Data entered in the contact form remains with us until you request deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your enquiry has been fully processed. Mandatory statutory provisions, particularly retention periods, remain unaffected.
Enquiries by email, telephone or fax
If you contact us by email, telephone or fax, your enquiry, including all resulting personal data (name, enquiry), is stored and processed by us to handle your request. We do not disclose this data without your consent.
This data is processed on the basis of Article 6(1)(b) GDPR if your enquiry relates to performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR) where requested; consent may be withdrawn at any time.
Data you send us through contact enquiries remains with us until you request deletion, withdraw your consent to storage, or the purpose of storage no longer applies, for example after your request has been fully processed. Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.
5. Newsletter
Newsletter data
If you wish to receive the newsletter offered on this website, we require your email address and information enabling us to verify that you own that address and agree to receive the newsletter. No further data is collected, or it is collected only voluntarily. We use this data exclusively to send the requested information and do not disclose it to third parties.
Data entered in the newsletter registration form is processed exclusively on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw consent to the storage of your data and email address and their use for sending the newsletter at any time, for example through the “unsubscribe” link in the newsletter. Withdrawal does not affect the lawfulness of processing already carried out.
Data provided to receive the newsletter is stored by us or the newsletter service provider until you unsubscribe and is deleted from the mailing list after unsubscription or when the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter mailing list at our discretion within our legitimate interest under Article 6(1)(f) GDPR.
Data stored by us for other purposes remains unaffected.
After you unsubscribe from the newsletter mailing list, your email address may be stored in a blocklist by us or the newsletter service provider where necessary to prevent future mailings. Blocklist data is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). Storage in the blocklist is not limited in time. You may object to storage if your interests outweigh our legitimate interest.
Newsletters to existing customers
If you order goods or services from us and provide your email address, we may subsequently use that address to send newsletters, provided we inform you beforehand. In that case, the newsletter contains only direct marketing for our own similar goods or services. You may unsubscribe from this newsletter at any time using the corresponding link in every newsletter. The legal basis for sending it in this case is Article 6(1)(f) GDPR in conjunction with section 7(3) of the German Act Against Unfair Competition (UWG).
After you unsubscribe from the newsletter mailing list, your email address may be stored in a blocklist to prevent future mailings to you. Blocklist data is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). Storage in the blocklist is not limited in time. You may object to storage if your interests outweigh our legitimate interest.
6. Plugins and tools
YouTube with enhanced privacy
This website embeds videos from YouTube. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page on this website that embeds YouTube, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you visited. If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in enhanced privacy mode. According to YouTube, videos played in this mode are not used to personalise browsing on YouTube. Advertisements displayed in enhanced privacy mode are also not personalised. No cookies are set in enhanced privacy mode. However, local storage elements are stored in the user’s browser instead; like cookies, these may contain personal data and be used for recognition. Details of enhanced privacy mode are available here: https://support.google.com/youtube/answer/171780.
Activating a YouTube video may trigger further data processing operations over which we have no control.
YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Where appropriate consent has been requested, processing takes place exclusively on the basis of Article 6(1)(a) GDPR and section 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.
Further information about data protection at YouTube is available in its privacy policy at: https://policies.google.com/privacy?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every DPF-certified company undertakes to comply with those standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
7. eCommerce and payment providers
Processing customer and contract data
We collect, process and use personal customer and contract data to establish, structure and amend our contractual relationships. We collect, process and use personal data concerning use of this website (usage data) only where necessary to enable users to use the service or to bill them for it. The legal basis is Article 6(1)(b) GDPR.
The customer data collected is deleted after completion of the order or termination of the business relationship and expiry of any applicable statutory retention periods. Statutory retention periods remain unaffected.