bastonnade clothing - Privacy Policy

Thank you for your interest in our company. Data protection is a high priority for the clothing department. The visit of the website belonging to bastonnade clothing (www.bastonnade.com) is possible without having to make any information regarding personal data. However, if the data subject wishes to use specific services offered by our company on our website, it may be necessary to work with personal data. If the processing of this personal data is necessary and there is no corresponding legal basis, we generally request the consent of the data subject.
Processing of personal data, such as name, postal address, the e-mail address or telephone number of a data subject is always carried out in accordance with the basic data protection regulation and in accordance with the specific national data protection provisions applicable to data protection clothing. Through this privacy statement, our company wishes to inform the general public about the nature, scope and purpose of the census, use and processing of personal data collected. As a result, data subjects are informed of their rights through this privacy statement.
As the data controller, bastonnade clothing has implemented numerous technical and organisational measures to ensure the greatest possible and flawless protection of personal data processed via its website. However, it is possible that data transmissions over the Internet have security vulnerabilities so that absolute protection cannot be guaranteed. For this reason, each data subject is free to choose another means of transmitting his or her personal data to us, such as by phone.

1 Definitions

The Data Protection Statement for Bastonnade Clothing is based on the terminology used by the European Directive and the regulatory authority in the adoption of the General Data Protection Regulation (GDPR). Our privacy policy must be easy to read and understand for the public, as well as for our customers and business partners. To do this, we would like to explain in advance the terminology used.
We use the following terms in this Privacy Policy, including but not limited to:

a) Personal data

Personal data are all information concerning an identified or identifiable natural person (hereinafter referred to as the "data subject"). A natural person who, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics, is considered to be identifiable, expresses the physical, physiological, genetic, mental, economic, cultural or social characteristics of that natural person may be identified.

b) Person concerned

Data subject is any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing

Processing: any process or series of operations related to personal data, such as the collection, organisation, storage, adaptation or modification, reading, query, use, with or without the aid of automated procedures. Disclosure by submission, dissemination or other form of service, reconciliation or association, restriction, erasure or destruction.

d) Limitation of processing

The limitation of processing is the marking of the personal data stored in order to limit their future processing.

e) Profiling

Profiling is any type of automated processing of personal data that involves using such personal information to assess certain aspects of a natural person’s personality, in particular performance aspects, economic situation, health, personal needs. Analyze or predict the preferences, interests, reliability, behaviour, location or movement of that natural person.

f) Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a data subject without additional information, provided that such information is kept separately and is subject to technical and organisational measures to ensure the confidentiality of personal data. Not assigned to an identified or identifiable natural person.

g) The controller or controller

The controller or controller shall be the natural or legal person, public authority, body or body which, alone or in conjunction with others, decides on the purposes and means of processing personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be defined in Union or national law.

h) Subcontractor

The processor is a natural or legal person, a public authority, an agency or another body which processes personal data on behalf of the controller.

i) Recipient

The recipient is a natural or legal person, agency, agency or other entity to whom the personal data is disclosed, whether or not it is a third party. However, authorities likely to receive personal data under Union or national legislation relating to a given task shall not be considered as beneficiaries.

j) Third party

The third party is a natural or legal person, a public authority, a body or bodies other than the data subject, the controller, the processor and the authorised persons under the direct responsibility of the controller or sub-controllerprocessing of personal data.

k) Consent

Consent' means any consent voluntarily given and expressed unambiguously in the form of a declaration or other unambiguous confirmation by the person concerned in the particular case, by which the data subject indicates that he or she consents to the processing of his or her personal data.

2. Name and address of the controller

The person responsible within the meaning of the General Data Protection Regulation, other data protection laws in force in the Member States of the European Union and other provisions having a data protection character shall be:

bastonnade clothing
c/o david denega
Av. de sévelin 32d
1004 lausanne / switzerland
Phone: +41 76 489 13 57
E-mail: hi@bastonnade.com
Website: www.bastonnade.com

3. Name and address of data protection officer

The data protection officer of the controller shall be:
bastonnade clothing
c/o david denega
Av. de sévelin 32d
1004 lausanne / switzerland
Phone: +41 76 489 13 57
E-mail: hi@bastonnade.com
Website: www.bastonnade.com
Any data subject may contact our Data Protection Officer at any time for any questions or suggestions regarding data protection.

4. Cookies

Bastonnade clothing website uses cookies. Cookies are text files that are stored and stored on a computer system via an internet browser.

Many websites and servers use cookies. Many cookies contain what is called a cookie ID. A cookie ID is a unique cookie ID. It consists of a chain through which web pages and servers can be assigned to the specific internet browser in which the cookie was stored. This allows websites and servers visited to distinguish the individual’s browser from other web browsers that contain other cookies. A particular internet browser can be recognized and identified by the unique cookie ID.

By using cookies, bastonnade clothing can provide users of this website with more user-friendly services that would not be possible without the cookie setting.

With the help of a cookie, the information and offers on our website can be optimised for the user. As already mentioned, cookies allow us to recognise the users of our website. The purpose of this recognition is to facilitate the use of the site by users. For example, the user of a website that uses cookies does not need to re-enter his identification information each time he visits the website, as this is done by the website and the cookie stored on his computer system. Another example is the cookie of a shopping cart in the online store. The online store keeps in mind the items that a customer has placed in the virtual shopping cart via a cookie.

The data subject may at any time prevent the installation of cookies on our website via the Internet browser used and thus permanently contradict the installation of cookies. In addition, already configured cookies can be deleted at any time via an internet browser or other software. This is possible in all common Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, all functions of our website may not be fully usable.

5. Collection of general data and information

The Bastonnade clothing website collects a series of general data and information whenever the website is visited by a data subject or by an automated system. This general data and information is stored in the server log files. The (1) types and versions of browsers used, (2) the operating system used by the access system, (3) the Internet page from which an access system accesses our Web site (hereinafter referred to as "referents"), (4) the Web sub-pages accessible via (5) the date and time of access to the website, (6) an Internet protocol address (IP address), (7) the Internet service provider of the access system and (8) other similar data and information used in the event of an attack on our computer systems.
When using this general data and information, bastonnnade clothing does not draw any conclusions about the data subject. Rather, this information is required to (1) properly provide the content of our website, (2) optimize and advertise the content of our website, (3) ensure the continued operation of our computer systems and website technology, and (4) provide law enforcement officials with the information needed to enforce the law in the event of a cyber-attack. These data and information collected anonymously are evaluated by bastonnade clothing, on the one hand statistically, but also in order to increase the confidentiality and security of our company’s data, in order to guarantee an optimal level of protection of the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

6. Registration on our website

The data subject may register on the website of the controller by providing personal data. The personal data to be sent to the controller is derived from the respective input mask used for the registration. The personal data entered by the data subject are collected and stored solely for internal use by the controller and for his own purposes. The controller may initiate the transfer to one or more subcontractors, such as a parcel service, which also uses the personal data only for internal use attributable to the controller.
By registering on the website of the controller, the IP address assigned by the internet service provider of the data subject, the date and time of registration are also stored. The storage of this data takes place in the context that only the misuse of our services can be avoided, and this data allows in case of need to clarify the offences committed. In this respect, the storage of this data is necessary to secure the controller. The disclosure of this data to third parties is not, unless there is a legal obligation to transmit or disclose the police.
By registering the data subject who voluntarily provides personal data, the controller is responsible for providing the data subject with content or services which, due to the nature of the case, can only be offered to registered users. Registrants are free to modify the personal data provided during registration at any time or to delete them completely from the database of the controller.
The controller must, at any time and upon request, provide each data subject with information about his or her personal data. In addition, the controller shall correct or delete personal data at the request or with reference to the data subject, to the extent that this does not conflict with legal storage requirements. All persons concerned by the controller are at the disposal of the data subject as a contact person in this context.

7. Subscribe to our newsletter

On the site of bastonnade clothing, users have the opportunity to subscribe to the newsletter of our company. The personal data transmitted to the controller during the ordering of the newsletter comes from the input mask used for this purpose.
bastonnade clothing regularly informs its customers and business partners through a newsletter about the company’s offers. Our company’s newsletter can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers for the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address entered by a data subject for the first time to send newsletters using the double opt-in procedure. This confirmation email is used to verify whether the owner of the email address as the data subject has authorized the receipt of the newsletter.
When you subscribe to the newsletter, we also record the IP address of the computer system used by the data subject at the time of registration, as well as the date and time of registration, as assigned by the Internet service provider. The collection of this data is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date and therefore constitutes a legal guarantee for the controller.
The personal data collected as part of the newsletter registration will be used exclusively for sending our newsletter. Subscribers to the newsletter may also be informed by e-mail if this is necessary for the operation of the newsletter service or for their registration, as may be the case in the event of a change in the information letter or a technical change. Personal data collected as part of the newsletter service will not be transmitted to third parties. Registration for our newsletter may be terminated at any time by the data subject. The consent to the storage of personal data that the data subject has given us for sending the newsletter may be revoked at any time. In order to revoke the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time by sending a message to the controller.

8. Follow-up to the newsletter

The Clothing Beating Bulletins contain counting pixels. A counting pixel is a miniature graphic embedded in such e-mails sent in HTML format to allow logging and analysis of log files. This allows a statistical assessment of the success or failure of online marketing campaigns. Based on the embedded pixel, bastonnade clothing can detect if and when an email was opened by a data subject and which links in the email were called by the data subject.
This personal data collected via the counting pixels contained in the newsletters will be stored and evaluated by the controller in order to optimize the distribution of the newsletters and better adapt the content of future newsletters to the interests of the person concerned. This personal data will not be disclosed to third parties. Data subjects have the right at any time to revoke the separate declaration of consent via the double opt-in procedure. After the revocation, this personal data will be deleted by the controller.

9. Contact via the website

In accordance with the legal provisions, the website of bastonnade clothing contains information that allows us to contact our company quickly and to communicate directly with us, which also includes a general e-mail address. If a data subject contacts the controller by e-mail or via a contact form, the personal data provided by the data subject will be automatically saved. This personal data, voluntarily transmitted by an individual to the controller, is stored for the purpose of processing or contacting the data subject. There is no disclosure of this personal data to third parties.

10. Routine deletion and blocking of personal data

The controller shall only process and store the personal data of the data subject for the period necessary to achieve the purpose of the storage or, where appropriate, European directives or regulations or any other legislator, under the legislation or regulation that the controller has been provided for.
If the object of storage is omitted or if a storage period prescribed by European directives and regulations or by any other relevant legislature expires, personal data will be systematically and in accordance with legal provisions blocked or deleted.

11. Rights of the data subject

a) Right of confirmation
Each data subject shall have the right, conferred by the European regulators, to request the controller to confirm whether the personal data concerning him or her are being processed. If a data subject wishes to make use of this right of confirmation, he or she may contact an employee of the controller at any time.
b) Right to information
Any person concerned by the processing of personal data shall have the right, at any time, granted by the European regulatory authority, obtain free of charge from the controller the information on the personal data stored about it and a copy of that information. In addition, the European legislator and regulator provided the data subject with the following information:
-The purposes of the processing
-Categories of personal data being processed
-the addressees or categories of addressees to whom the personal data have been disclosed or are still disclosed, in particular to addressees located in third countries or to international organisations
-where possible, the expected duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration
-the right to rectification or erasure of personal data concerning them or the limitation of processing by the controller or the right to oppose such processing
-the existence of a right of complaint before a supervisory authority
-If personal data are not collected from the data subject: all available information on the data source
-the existence of automated decision-making involving profiling in accordance with paragraphs 1 and 4 of Article 22 of the GDPR and - at least in such cases - useful information on the logic involved, and the scope and expected impact of such treatment on the data subject.
In addition, the data subject shall have a right of access as to whether the personal data have been transmitted to a third country or to an international organisation. If this is the case, the data subject shall have the right to obtain information on appropriate guarantees in connection with the transfer. If a data subject wishes to exercise this right to information, he or she may at any time contact an employee of the controller.
c) Right of rectification
Any person concerned by the processing of personal data shall have the right, recognised by the European legislator, to require the immediate correction of inaccurate personal data concerning him or her. In addition, the data subject shall have the right to request the entry of incomplete personal data, including by means of a supplementary declaration, taking into account the purposes of the processing.
If a data subject wishes to exercise this right of rectification, he or she may, at any time, contact an employee of the controller.
d) Right of withdrawal (right to be forgotten)
Any person concerned by the processing of personal data has the right, recognised by European directives and regulators, to require the controller to immediately delete the personal data concerning him or her, where one of the following reasons is satisfied and treatment is not required:
-Personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
-The data subject withdraws their consent on which the processing was based on Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing.
-In accordance with Article 21(1) of the GDPR, the data subject objects to the processing and there is no legitimate reason to justify the processing, or the data subject objects in accordance with Article 21, paragraph 2 of the GDPR against processing.
-Personal data were processed illegally.
-The deletion of personal data is necessary to comply with a legal obligation, under Union or national law, to which the controller is subject.
-Personal data were collected concerning the information society services offered under Article 8(1) of the GDPR.
If one of the above reasons is correct and a data subject wishes to organise the deletion of personal data held by bastonnade clothing, he or she may at any time contact an employee of the controller. The Bastonnnade Clothing employee will ensure that the request for deletion is met immediately.
If the personal data have been made public by bastonnade clothing and if our company is responsible for their deletion as responsible in accordance with Article 17, paragraph 1, of the GDPR, bastonnade clothing will take into account available technology and implementation costs. Appropriate measures, in particular of a technical nature, intended to inform the other controllers of the published personal data that the data subject has been erased by those other controllers of any links with such personal data or copies or to request replies from these personal data, to the extent that treatment is not required. The employee will make the necessary arrangements in individual cases.
e) Right to restrict processing
Any person concerned by the processing of personal data has the right, recognised by the European Directive and the regulatory authority, to request the controller to restrict the processing if one of the following conditions is met:
-The accuracy of the personal data is contested by the data subject during a period allowing the person responsible to verify the accuracy of the personal data. - The processing is illegal, the data subject refuses to delete the personal data but requests the restriction of the use of personal data.
-The processing is illegal, the data subject refuses to delete the personal data but requests the restriction of the use of personal data.
-The controller no longer needs the personal data for the purposes of the processing, but the data subject requests that he or she assert, exercise or defend his or her rights.
-The data subject objects to the processing under Article 21, paragraph 1, of the GDPR and it is not yet clear whether the legitimate reasons of the responsible person outweigh those of the data subject.
SIf one of the above conditions is met and a data subject wishes to request the restriction of personal data held by bastonnade clothing, he or she may at any time contact an employee of the controller. The clothing bastonnade employee will put in place a processing restriction.

f) Data Portability

Any person concerned by the processing of personal data has the right conferred by European directives and regulations to obtain the personal data concerning him or her provided to a controller by the data subject in a format structured, common and machine readable. It shall also have the right to transmit such data to another responsible person without hindrance to the person responsible for providing the personal data, provided that the processing is based on the consent referred to in Article 6, paragraph 1, paragraph a) of the GDPR or Article 9, paragraph 2, paragraph a) of the GDPR or a contract concluded pursuant to Article 6, paragraph 1, paragraph b) of the GDPR and automated processing, unless the processing is necessary for the performance of a task in the public interest or in the exercise of public authority, which has been assigned to the responsible person.
Furthermore, in exercising its right to data portability under Article 20, paragraph 1, of the GDPR, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically possible, feasible and does not affect the rights and freedoms of others.  In order to exercise its right to data portability, the data subject may at any time contact a clothing bastonnade employee.

g) Right of objection

Toute personne concernée par le traitement de données à caractère personnel a le droit conféré par la directive et l'autorité de régulation européenne à tout moment, pour des raisons tenant à sa situation particulière, contre le traitement de données à caractère personnel le concernant en vertu de l'article 6, paragraphe 1, point e) ou f, RGPD soulève une objection. Ceci s'applique également au profilage basé sur ces dispositions.
In the event of an objection, bastonnade clothing will no longer process personal data, unless we can prove that there are legitimate and convincing reasons which outweigh the interests, rights and freedoms of the data subject, or whether the purpose of the processing is to assert, exercise or defend legal claims.
If Bastonnade clothing processes personal data in order to manage direct mail, the data subject has the right to object at any time to the processing of personal data for the purposes of advertising. This also applies to profiling, insofar as it is associated with such direct mail. If the data subject objects to the processing of clothing bastonnade for direct marketing purposes, clothing bastonnade will no longer process the personal data for those purposes.
In addition, the data subject shall have the right, for reasons relating to his or her particular situation, against the processing of personal data concerning him or her, for scientific, historical or statistical purposes, in accordance with Article 89, paragraph 1 of the GDPR are objected to, unless such processing is necessary to fulfil a task of public interest.
To exercise his right of objection, the data subject may directly contact any clothing bastonnade employee or any other employee. The data subject is also free, in the context of the use of Information Society services, notwithstanding Directive 2002/58/EC, to exercise his right of opposition through automated procedures using technical specifications.

h) Automated decisions in individual cases, including profiling

Any person concerned by the processing of personal data has the right, recognised by the European Directive and the European regulatory authority, not to be subject to a decision based solely on automated processing, including profiling, which has a legal effect or which equally appreciably affects its performance if the decision (1) is not necessary for the conclusion or performance of a contract between the data subject and the controller, or (2) is authorised by the legislation of the Union or of a Member State to which the controller is subject, and that legislation provides for appropriate measures to protect the rights and freedoms, as well as the legitimate interests of the data subject, or (3) with the express consent of the person concerned.
If the decision (1) is necessary for the conclusion or performance of a contract between the data subject and the controller or (2) it is executed with the express consent of the data subject, bastonnade clothing then takes appropriate measures to protect the rights and freedoms, as well as to protect the legitimate interests of the data subject, including at least the right to obtain the intervention of a person by the controller, express its own position and challenge the decision.
If the data subject wishes to claim automated decision rights, he or she may contact an employee of the controller at any time.

i) Right to revoke data protection consent
Any person concerned by the processing of personal data has the right, granted by the Directive and the European regulatory authority, to revoke his or her consent to the processing of personal data at any time.
If the data subject wishes to exercise his or her right to withdraw his or her consent, he or she may, at any time, contact an employee of the controller.

)12. Data protection in applications and in the application process

The controller shall collect and process the personal data of the applicants for the purpose of processing the application process. Processing can also be done electronically. This is particularly the case when an applicant submits the corresponding application documents to the controller by electronic means, for example by electronic mail or via a web form available on the website. If the controller enters into an employment contract with a candidate, the data transmitted will be stored for the purpose of carrying out the employment relationship in compliance with legal requirements. In the absence of an employment contract concluded with the applicant by the controller, the application file shall be deleted two months after the decision to reject is announced, unless this deletion compromises other legitimate interests of the controller. Another legitimate interest in this regard is, for example, the burden of proof in regulated proceedings.

)13. Data Protection Regulations for the Use of Google Analytics (with anonymization)

The controller has integrated on this site the Google Analytics component (with anonymization function). Google Analytics is a website analysis service. Web analytics is the collection, collection and analysis of data on the behaviour of website visitors. Among other things, a web analytics service collects data on the website of an affected person on a website (referred to as referrers), on the sub-pages of the website visited, or on the frequency and length of stay of a secondary page. Web analytics are primarily used to optimize a website and a cost-benefit analysis of Internet advertising.
The company that operates the Google Analytics component is Google Inc., 1600 Amphitheatre Park, Mountain View, CA 94043-1351, USA.
The controller uses the addition "_gat. _anonymizeIp" for Web analysis via Google Analytics. Through this addendum, the IP address of the data subject’s Internet access will be shortened and anonymised by Google if the access to our website comes from a Member State of the European Union or another State party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze visitor flows on our website. Among other things, Google uses the data and information obtained to evaluate the use of our website, to prepare online reports for us on the activities of our websites and to provide other services related to the use of our website.
Google Analytics uses a cookie on the data subject’s computer system. What cookies are, has already been explained above. By using this cookie, Google is authorized to analyze the use of our website. Whenever the controller accesses one of the pages of this website and a Google Analytics component is integrated, the Internet browser of the data subject’s computer system is automatically launched by the corresponding Google Analytics component. To submit data to Google for online analysis. As part of this technical process, Google will be aware of personal data, such as the IP address of the data subject, which are used by Google to track the origin of visitors and clicks, and then make payment of commissions possible.
The cookie stores personally identifiable information, such as the time of access, the location from which access was made and the frequency of visits to the site by the data subject. Each time you visit our website, your personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States. Google may transfer the personal data collected during the technical process to third parties.
The data subject may at any time prevent the installation of cookies on our website, as indicated above, by means of a corresponding setting of the Internet browser used, which constantly contradicts the installation of cookies. Such a configuration of the Internet browser used would also prevent Google from setting a cookie in the data subject’s computer system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software.
In addition, the data subject may object to and prevent the collection of data generated by Google Analytics for the use of this website and the processing of such data by Google. To do this, the person must download and install a browser add-on at https://tools.google.com/dlpage/gaoptout. This add-onThe browser informs Google Analytics via JavaScript that no data or information relating to website visits can be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If the data subject’s computer system is subsequently deleted, formatted or reinstalled, the data subject must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or any other person under their control, it is possible to reinstall or reactivate the browser add-on.
Additional information and Google’s privacy policy are available at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/en.html. Google Analytics is further explained at https://www.google.com/intl/en_en/analytics/.

)14. Privacy Guidelines for the Use and Use of Google Remarketing

The controller has integrated the services of Google Remarketing on this website. Google Remarketing is a feature of Google AdWords that allows a company to display ads to those users who were previously on its website. The integration of Google Remarketing thus allows a company to create user-friendly advertising, allowing users to display interest-based ads.
La société de services de remarketing de Google est Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Google’s remarketing aims to display interest-based advertisements. Google remarketing allows us to display ads on the Google network or to display them on other websites according to the needs and interests of Internet users.
Google Remarketing places a cookie on the data subject’s computer system. What cookies are, has already been explained above. By setting the cookie, Google will be able to recognize visitors to our website if they subsequently call websites that are also members of Google’s advertising network. On each visit to a website on which the Google Remarketing service has been integrated, the person’s Internet browser automatically identifies itself with Google. As part of this technical process, Google receives information about personal data, such as the IP address or user behaviour on the Internet, which Google uses in particular to display advertisements of interest.
The cookie is used to store personal information, such as websites visited by the data subject. Whenever you visit our website, personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States. Google may transfer the personal data collected during the technical process to third parties.
The data subject may at any time prevent the installation of cookies on our website, as indicated above, by means of a corresponding setting of the Internet browser used, which constantly contradicts the installation of cookies. Such a configuration of the Internet browser used would also prevent Google from setting a cookie in the data subject’s computer system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software.
In addition, the data subject may object to Google’s interest-based advertising. To do this, the data subject must access the www.google.com/settings/ads link from each of the Internet browsers they use and define the desired settings.
Additional information and Google’s privacy policy are available at https://www.google.com/intl/en/policies/privacy/.

)15. Privacy Guidelines for Using Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an Internet advertising service that allows advertisers to run the results of Google and Google search engines. Google AdWords allows an advertiser to predefine keywords to display an ad in the Google search engine results only when the search engine retrieves a search result related to a keyword. In the Google network, ads are distributed on thematic web pages using an automated algorithm and based on predefined keywords.
The company operating the services of Google AdWords is Google Inc., 1600 Amphitheatre Park, Mountain View, CA 94043-1351, USA.
The purpose of Google AdWords is to promote our website by displaying advertisements based on the interests of third-party sites and in the search results of Google’s search engine, as well as by displaying advertisements on our website.
If a data subject arrives on our website via a Google ad, a "conversion cookie" will be stored on Google’s computer system by Google. What cookies are, has already been explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie indicates whether certain sub-pages, such as the shopping cart of an online shop system, have been viewed on our website. The conversion cookie allows us and Google to know whether a data subject who came to our website via an AdWords ad has generated revenue, that is, a completed or cancelled purchase.
The data and information collected through the conversion cookie is used by Google to create statistics on visitors to our website. We then use these visit statistics to determine the total number of users that were sent to us via AdWords ads, in order to determine the success or failure of each AdWords ad and optimize our AdWords ads for the future. , Neither our company nor any other Google AdWords advertiser receives any information from Google that could identify the data subject.
The conversion cookie stores personally identifiable information, such as web pages visited by the data subject. Whenever you visit our website, personal information, including the IP address of the Internet connection used by the data subject, is transferred to Google in the United States of America. This personal information is stored by Google in the United States. Google may transfer the personal data collected during the technical process to third parties.
The data subject may at any time prevent the installation of cookies on our website, as indicated above, by means of a corresponding setting of the Internet browser used, which constantly contradicts the installation of cookies. Such a configuration of the Internet browser used would also prevent Google from setting a conversion cookie on the data subject’s computer system. In addition, a cookie already set by Google AdWords can be deleted at any time via the Internet browser or other software.
In addition, the data subject may object to Google’s interest-based advertising. To do this, the data subject must access the www.google.com/settings/ads link from each of the Internet browsers they use and define the desired settings.
Additional information and Google’s privacy policy are available at https://www.google.com/intl/en/policies/privacy/.

)16. Privacy Guidelines for the Use of YouTube

The controller has integrated YouTube components on this site. YouTube is an Internet video portal that allows video publishers to freely watch video clips and other users to view, rate and comment on them for free. YouTube allows the publication of all types of videos, so that complete programs of movies and television programs, but also music videos, trailers or videos made by users via the Internet portal are available.
YouTube’s operating company is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Park, Mountain View, CA 94043-1351, USA.
Each visit to one of the pages of this site managed by the controller and incorporating a YouTube component (YouTube video) automatically results in the representation of the Internet browser on the subject’s computer system by the corresponding YouTube component. to download an illustration of the corresponding YouTube component from YouTube. For more information on YouTube, visit https://www.youtube.com/yt/about/en/. As part of this technical process, YouTube and Google are aware of the specific bottom of our site visited by the data subject.
If the data subject is connected to YouTube at the same time, YouTube recognises by calling a sub-page containing a YouTube video the specific background of our website visited by the data subject. This information is collected by YouTube and Google and associated with the individual YouTube account.
YouTube and Google will always receive information via the YouTube component indicating that the data subject has visited our website if the data subject is logged into YouTube simultaneously when accessing our website; This happens whether the person clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, he or she may prevent this transmission by logging out of his or her YouTube account before calling our website.
YouTube’s privacy policy, available at https://www.google.com/intl/en/policies/privacy/, identifies the collection, processing and use of personally identifiable information by YouTube and Google.

17. Payment Method: PayPal Privacy Policy as a Means of Payment

The controller has integrated PayPal components on this site. PayPal is an online payment service provider. Payments are made via PayPal accounts, which are virtual private or business accounts. In addition, PayPal may process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which explains the lack of a classic account number. PayPal allows you to initiate online payments to third parties or receive payments. PayPal also acts as an agent and provides buyer protection services.
PayPal’s European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.
If the data subject selects "PayPal" as the payment option during the order process in our online shop, the data of the data subject will be automatically transmitted to PayPal. By selecting this payment option, the data subject consents to the transfer of the personal data necessary for the processing of the payment.
The personal data sent to PayPal are usually the first name, last name, address, email address, IP address, telephone number, mobile phone number or other data needed to process the payment. For the performance of the sales contract, such personal data are also necessary and are related to the order concerned.
The purpose of data transmission is payment processing and fraud prevention. The controller shall provide PayPal with personally identifiable information, in particular if the transfer has a legitimate interest. Personal data exchanged between PayPal and the controller may be transferred by PayPal to credit reporting agencies. The purpose of this transmission is to verify identity and credit.
PayPal may disclose personal information to affiliates, service providers or subcontractors, to the extent necessary to fulfil its contractual obligations or to process the data on behalf of.
The data subject may at any time revoke consent to the processing of personal data against PayPal. A revocation has no effect on the personal data to be processed, used or transmitted for the processing of a (contractual) payment.
PayPal’s applicable privacy policy is available at https://www.paypal.com/webapps/mpp/ua/privacy-full.

18. Legal basis for processing

Art 6 I, point a) of the GDPR serves in particular to our legal base company for the processing of foreign personal data for which we obtain consent for specific processing purposes. If the processing of personal data is necessary to perform a contract to which the data subject is a party, as is the case, for example, in the case of treatments necessary for the delivery of a good or the provision of another service or the counterparty, the treatment is based on: Art 6 I, point b) of the GDPR. The same applies to processing operations requiring pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation to process personal data, such as the performance of tax obligations, the processing is based on Article 6 I, point c) of the GDPR. In rare cases, the processing of personal data may be required to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our premises was injured and his name, age, health insurance or other vital information had to be passed on to a doctor, hospital or other third party. Next, the treatment would be based on Article 6 I, point d) of the GDPR are based. Ultimately, processing operations could be based on Article 6 I, point f) of the GDPR. On this legal basis, processing that is not covered by any of the above legal bases is necessary if processing is necessary to protect the legitimate interests of our company or a third party, unless the interests, the fundamental rights and freedoms of the data subject do not prevail. Such treatments are particularly authorized to us because they have been specifically mentioned by the European legislator. In this respect, it considered that a legitimate interest could be taken into account if the data subject was a customer of the controller (recital 47, second sentence, GDPR).

19. Eligible processing interests pursued by the controller or a third party

The processing of personal data is based on Article 6 I, point f) of the GDPR is our legitimate interest to carry out our activities in the interest of all our employees and shareholders.

20. Retention period of personal data

The criterion for the duration of storage of personal data is the respective legal retention period. After the deadline, the corresponding data will be deleted if it is no longer necessary to perform the contract or to launch a contract.

21. Legal or contractual provisions relating to the provision of personal data

Necessity of the conclusion of the contract; Obligation of the data subject to provide personal data; possible consequences of not providing personal data.
We specify that the provision of personal information is partly required by law (such as tax regulations) or may result from contractual arrangements (such as contractor contact information). Sometimes it may be necessary to enter into a contract under which a data subject provides us with personal data which must then be processed by us. For example, the data subject is required to provide us with personal information when our company enters into a contract with them. If the personal data are not provided, the contract with the data subject could not be closed. Before personal data is provided by the data subject, the data subject must contact one of our employees. Our employee will inform the person on a case-by-case basis if the provision of personal data is required by law or contract or if it is required for the conclusion of the contract, whether there is an obligation to provide personal data and the consequences of not providing personal data. 

22. existence of automated decision-making

As a responsible company, we refrain from any decision-making or automatic profiling.

This Privacy Policy was created by the Privacy Statement Generator of the DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as the Data Protection Officer, in cooperation with the privacy advocates of the law firm WILDE BEUGER SOLMECKE | Rechtsanwälte.