Data Protection

1. Data protection at a glance

General information

The following information provides a simple overview what happens with your personal data, if you visit this website. Personal data are all data with which you can be personally identified. For detailed information about the topic of data protection please read our data protection declaration which you can find below.

Data collection on this website

Who is responsible for the data collection on this website?

The data processing on this website will be carried out by the website owner. Her contact details can be found in the imprint of this website.

How do we collect data?

On the one hand, your data will be collected because you communicate them to us. It is data for example that you enter in a contact form.

Other data will be collected automatically by our IT systems after your consent when you visit this website. First of all, these are technical data (e.g. web browser, operating system or time of  page view). The collection takes place automatically once you enter this website.

What do we use your data for?

One part of the data will be collected to secure an accurate deployment of the website. Other data can be used to analyse your user behaviour.

What are your rights concerning your data?

At any time, you can obtain information free about origin, recipient and purpose of your stored data. Furthermore, you have the right to claim the correction or deletion of these data. If you have accepted the data processing you can revoke this acceptance any time for the future. Furthermore, under certain circumstances you have the right to claim the restriction of processing your personal data. Additionally, it is appertained to you to complain to the competent supervisory authority.

On this as well as on further questions about data protection you can refer to the address given in the imprint at any time.

Analysis tools and tool of third-party suppliers

When you visit this website your surving behaviour can be evaluated statistically.  This ist done through so called analysis programs. Detailed information to these analysis programs you can find in the following data protection declaration.

Legal basis for the procession of personal data

If we obtain consent for the processing operation of personal data of the data subject, Art. 6 Para. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

If we process personal data which are necessary to fulfill a contract with the data subject,  Art. 6 Para. 1 lit. b GDPR serves as the legal basis. This also apply for processing operations necessary for the accomplishment of pre-contractual measures.

As far as the processing of personal data is necessary to fulfill a legal obligation of our company,  Art. 6 Para. 1 lit. c DSGVO serves as the legal basis.

In case that essential interests of the data subject or another natural person require the processing of personal data, Art. 6 Para. 1 lit. d GDPR serves as the legal basis.

In case that the processing is necessary to protect legitimately an interest of our company or of a third person and the interests, fundamental rights and funamental freedom do not outweigh the former interests,  Art. 6 Para. 1 lit. f GDPR serves as the legal basis for the processing.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (Hoster). The personal data collected on this website will be saved on the servers of the hoster. This could be IP addresses, contact requests, meta data and communication data, contract data, contact data, names, website accesses and other data generated by a website.

The use of the hoster is done for the purpose of fulfillment of contracts with our potential or existing customers (Art. 6 Para. 1 lit. b DSGVO) and on behalf of a secure, fast and efficient deployment of our online offerings by a professional provider  (Art. 6 Para. 1 lit. f DSGVO).

Our hoster will only process data if and when this is necessary for the fulmillment of his duty to perform and to will obey our instructions in terms of these data.

Conclusion of a contract for order processing

To ensure the data protection compliant processing we have concuded a contract with our hoster about the order processing.

3. General information and mandatory information

Data protection

The operator of this website take the protection of your personal data very seriously. Your personal data are treated as confidential and according to the data protection regulations as required by law as well as by this data protection declaration.

As a general rule, the visit of our website is possible without disclosing personal details. Insofar as personal data (for example name, address or e-mail address) are collected, this is always on a voluntary basis. Without your explicit consent these data are not communicated to third parties.

We point to the fact that the transmission of data via the Internet (e.g., by e-mail) can entail security flaws. It is therefore impossible to safeguard the data completely against unjustified access by third parties.

Information about the responsible authority

The responsible authority for the data processing on this website is:

Sun Dragon
Alramstraße 13
81371 München
Germany
Phone: +49 176 9660 1070
E-mail: ckara@sun-dragon.de

Responsible authority is the natural or artificial person deciding alone or togetzer with others about the purposes and means of the processing of personal data (e. g. name, e-mail addresses or the like).

Data protection officer of the person in authority is:

Cornelia Kara M. A.
Alramstraße 13
81371 München
Germany
Phone: +49 176 9660 1070
E-mail: ckara@sun-dragon.de

Revocation of your consent to data processing

A lot of data processing operations are only possible with your explicit compliance. You can revoke an already given consent anytime. The legitimacy of the data processing taken place before the revocation remains uneffected by the revocation.

Right to object to the data collection in special cases and to direct advertising (Art. 21 GDPR)

IF THE DATA PROCESSING IS DONE ON THE BASIS OF ART. 6 PAR. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO LODGE AN OBJECTION AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RESULTING FROM YOUR SPECIAL SITUATION ANYTIME; THE SAME APPLIES TO  A PROFILING BASED ON THESE REGULATIONS. THE LEGAL BASIS IN QUESTION ON WHICH A PROCESSING TAKES PLACE YOU CAN FIND IN THIS DATA PROTECTION DECLARATION. IF YOU LODGE AN OBJECTION, YOUR AFFECTED PERSONAL DATA WON'T BE PROCESSED ANYMORE, UNLESS WE CAN GIVE IMPERATIVE REASONS WORTHY OF PROTECTION FOR THE PROCESSING OVERWEIGHING YOUR INTERESTS; RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ALLEGE, EXECUTE OR DEFEND LEGAL CLAIMS (OBJECTION AFTER ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING, THIS APPLIES ALSO TO THE PROFILING AS LONG AS IT IS RELATED TO SUCH A DIRECT ADVERTISING. IF YOU OBJECT; YOUR PERSONAL DATA WON'T BE USED FOR DIRECT ADVERTISING ANYMORE (OBJECTION AFTER ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In case of offenses against the GDPR the person affected is appertained to issue a complaint at a board of control, especially in the the member state of his habitual residence, his workplace or the place of the presumptive violation. The right to lodge a complaint exists regardless of other administrative or juridical legal remedies.

Right of data portability

You have the right to request data that we are processing automatically on the basis of your consent or to fulfill a contract, to you or to a third person in a current machine-readable format. Inasmuch as you claim the direct transmission of the data to another person responsible this only takes place if it es technically possible.

SSL or TLS encryption

For reasons of safety and to proctect the transmission of confidential content like orders or requests you are sending to us as website operator, this site uses a SSL or TLS encryption.  An encrypted connection can be seen from the fact that the address line of the browser changes from „http://“ to „https://“ and from the lock symbol in your browser line.

If the SSL or. TLS encryption is active, data that you transfer to us cannot be read by third persons.

Disclosure, deletion and adjustment

Within the framework of the applicable legal provisions, you have the right to get information about your stored personal data as well as about their origin, the recipients and the purpose of data processing without payment and possibly a right of adjustment or deletion of these data. If you have questions on this or on  your personal data you can contact us via the address given in the imprint at any time.

Right of  restriction of processing

You have the right to claim the restriction of processing of your personal data. For this you can turn to the address indicated in the imprint at any time. The right of restriction of processing exists under the following circumstances:

  • If you deny the accuracy of your personal data saved with us, generally we need time to check this. For the duration oft the check you have the right to claim for the restriction of prcessing of your personal data.
  • If the processing of your personal data has taken/take place wrongfully, you can demand the deletion of the data processing instead of their restriction.
  • If we don't need your personal data anymore, but you need them to exercise, defend or assert legal titles, you have the right to demand a restriction of the processing of your personal data instad of their deletion.
  • If you have entered an objection according to Art. 21 par. 1 GDPR, there has to be made an assessment between your and our interests. As long as there isn't decided which interests are overweighing, you have the right to demand the restriction of the processing of your personal data.

If you have limited the processing of your personal data, these data - except for their storage - can only be processed with your consent or for alleging, executing or defending of legal titles or for the protection of rights of another natural or artificial person or for reasons of important public interests of the European Union or one of the member states.

Objection of advertising mails

Herewith is rejected the use of contact data published within the scope of obligation to provide a masthead for sending advertisement and information materials not explicitly requested. The operators of these website reserve the right to take legal steps in the case of unsolicited sending of advertising information, e.g. by means of spam mail.

4. Data processing on this website

Cookies

The legal basis for the processing of personal data by using cookies is Art. 6 par. 1 lit. f GDPR.

Our websites use so called "cookies". Cookies are short text files and do not harm your terminal. They are stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal. Session cookies will be deleted automatically after your visit. Permanent cookies stay stored on your terminal until you delete them by yourself or they will be automatically deleted by your web browser.

Partially, also cookies of third party companies can be stored on your terminal if you enter our site (third party cookies). These allow us or you the use of certain services of the thrid party compnay (e. g. cookies to transact payment services).

Cookies have different functions. A lot of cookies are technically essential, because certain website functions wouldn't work without them (e. g. shopping cart function or the display of videos). Other cookies serve to evaluate the user behaviour or display advertisement. We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified also after a page change.

Cookies necessary for the implementation of the electronic communication process (essential cookies) or for the provision of certain functions desired by you (functional cookies, e. g. for the shopping cart function) or for the website optimization (e. g. cookies to measure the web audience) will be stored based on Art. 6 Para. 1 lit. f GDPR, as long as no other legal basis will be emitted. The website operator has an eligible interest to store cookies for the technically accurate and optimized provision of his services. As long as a consent to the storage of cookies has been retrieved, the storag of the respective cookies taktes place exclusively based on this consent (Art. 6 Para. 1 lit. a GDPR); the consent can be revoked at any time.

You can configure your browser so that you will be informed about the insertion of cookies and allow cookies only in isolated cases, exclude the acceptance of cookies for certain cases or generally as well as to activate the automatic deletion of cookies when you close the browser. If you deactivate cookies, the functionality of this website can be restricted.

Insofar as cookies of third party companies or for analysis purposes will be applied we will inform you separately within the scope of this data protection declaration und we will ask for a consent if necessary.

Cookies will be stored on the computer of the user and transmissed by it to our site. Because of this you as the user have the complete conrol over the usage of cookies. You can deactivate or limt the transmission of cookies by a change of settings in your web browser. Already stored cookies can be deleted at any time. This can also happen automatically. If cookies for our website are deactivated, possibly not all functions of the website could be comprehensively used.

Server log files

The provider of the website automatically collects and stores information in so-called server log files automatically transmitted to us by your browser. These information are:

  • Browser type/ browser version
  • Utilised operating system
  • Referrer URL
  • Hostname of the accessing data processor
  • Time of server request
  • IP address

These data cannot be related to particular persons. An aggregation of these data with other data sources will not take place. We will reserve the right to check these data subsequently, if we find concrete hints of illegal use.

A junction of these data with other data sources won't be made.

The collection of data takes place based on Art. 6 Para. 1 lit. f GDPR. The website operator has an eligible interest in the technically accurate display and optimization of her website - for that reason, server log files hast to be collected.

The temporary storing of the IP address by the system is necessary to enable the delivery of the website to the computer of the user. For this purpose, the IP address of the user has to be stored for the duration of the session.

The storing of log files serves to secure the operability of the website. Furthermore, the data serves us to optimize the website and to secure the security of our IT systems. An evaluation for marketing purposes doesn't take place in this context.

The data will be deleted as soon as they won't be necessary for the fulfillment of the purpose of their collection. In case of collection of data to provide the website is this the case when the respective session will be over.

In case of storage of data in log files is this the case after seven days at the latest. A storage beyond that is possible. In this case the IP addresses of the user will be deleted or alienated so that an assignment to the calling client is no longer possible.

Contact form

If you send us an inquiry per contact form your information and contact data given therein are stored for processing your request and in the event of further questions. These data will not be transmitted to others without your permission.

If you send us a request via contact form, your information from the application form including the contact details indicated by you will be stored by us to process your inquiry and in case of follow-up questions. These data won't be shared without your permission.

The processing of these data takes place based on Art. 6 Para. 1 lit. b GDPR, provided your inquiry correlates with the fulfilment of a contract or is necessary to conduct pre-contractual measures. In all remaining cases, the processing bases on our eligible interest to process the requests directed to us effectively.  (Art. 6 Para. 1 lit. f GDPR) or based on your consent (Art. 6 Para. 1 lit. a GDPR) in case it has been requested.

Your data filled in the contact form will remain to us until you will ask us to delete them, you revoke your consent to store or the purpose of data rentention will be cancelled. (e. g. after completing the processing of your request).Mandatory legal provisions  – especially retention periods – remain untouched.

Description and scope of data processing

On our website there exists a contact form for electronic approach. If the user seize this possibility, the data entered in the input mask will be transferred to us and stored. These data are:

  1. Form of address
  2. Name (Pflichtfeld)
  3. Surname (Pflichtfeld)
  4. phone number
  5. E-mail address (Pflichtfeld)
  6. Subject
  7. Your message

At the time of shipping the message the following data will be stored also:

  1. IP address of the user
  2. Date and time of registration

For the data processing there will be requested your consent during the shipping process and we will point to this data protection declaration.

Alternatively, a contact via the provided e-mail address is possible. In this case the personal data of the user transferred with the e-mail will be stored.

In this connection, no transfer to third parties will take place. The data will be used exclusively for the processing of the conversation.

Legal basis for the data processing

Legal basis for the data processing is in case of a existing consent of the user is Art. 6 Para 1 lit. a GDPR.

Legal basis for the data processing over the course of a e-mail transmission is Art. 6 Para. 1 lit. f GDPR. Should the e-mail contact aiminng at the conclusion of a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR.

Purpose of data processing

The processing of personal data from the input mask serves only for the processing of making contact. In case of making contact via e-mail there is also the necessary eligible interest to process the data.

The other personal data processed during the submission process serve to prevent the abuse of the contact form and to secure the safety of our information technology system

Duration of storage

The data will be deleted as soon as the won't be necessary any more for the achievement of the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user will have ended. The conversation has ended when the circumstances point towards a final clarification of the respective matter

The personal data collected additionally during the submission process will be deleted at the latest after seven days.

Option of opposition and removal

At any time, the user has the possibility to withdraw consent to process the personal data. In case that the user contact us via e-mail, he can opt out from the storage of personal data. In such a case the conversion cannot be continued,

In this case, all personal data stored during making contact will be deleted.

Inquiry on e-mail, telephone or fax

If you contact us via e-mail, phone or telefax, your request including all personal data (name, request) resulting form this will be saved with us to process your matter. These data won't be shared without your consent.

The processing takes place based on  Art. 6 Para. 1 lit. b GDPR, as long as your request correlates with the fulfillment of acontract or is necessary to conduct pre-contractual measures. In all remaining cases, the processing bases on our eligible interest to process the request sent to us effectively (Art. 6 Para. 1 lit. f GDPR) or based on your consent (Art. 6 Para. 1 lit. a GDPR) in case it has been requested.

Your data transmitted to us via contact request will remain to us until you will ask us to delete them, you revoke your consent to store or the purpose of data rentention will be cancelled. (e. g. after completing the processing of your request).Mandatory legal provisions  – especially retention periods – remain untouched.

Comment function on this website

For the comment function on this website, besides your comment also information about the time of generation of this comment and, in case that you won't post anonymously,  your chosen user name will be stored.

Storage period of the comments

The comments and the associated data (e. g. IP address) will be stored and remain on this website until the commented content will be removed completely or the comments have to be deleted for legal reasons (e. g.  insulting comments).

Legal basis

The storage of the comments takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke the permission given by you anytime. An informal message by e-mail to us is sufficient. The legitimacy of the already ensued data processing operation remains unaffected by the revocation.

5. Newsletter

Newsletter information

On our website you have the possibility to subscribe to a free newsletter.

To receive our newsletter your e-mail address is required.

Before the newsletter can be delivered you have to confirm explicitly by a so-called double opt-in that the newsletter service shall be activated for you. Subsequently, you will receive an e-mail of confirmation and authorization wherein we kindly request you to click on the included link to confirm us that you want to obtain our newsletter. You can unsubscribe from this newsletter at any time by clicking on the link indicated in every newsletter of us or by sending a short reply with „unsubscribe“. Your e-mail address will be used exclusively by us and will not be transmitted to third parties without your consent.

In this process the data from the input mask will be transferred to us during the  registration.

At this, the following data will be collected:

  1. Name
  2. Surname
  3. E-mail address

Furthermore the following data will be collected during the registration:

  1. IP address of the calling computer
  2. Date and time of registration

For the processing of data there will be obtained your consent during the registration process and be pointed to this data protection declaration.

The newsletter will be compiled by the help of the software Mailchimp which is corresponding to the GDPR prescriptions.  We use this service because of our eligible interest to dispatch our emails efficently and securely according to Para. 6 Abs. 1 lit. f GDPR. There will be no transfer of data to third parties. Only the forwarder of the newsletter receives and records Your address and further information for the shipping and analysis of the newsletters. The data will be used exclusively vor the transmission of the newsletter.

Die Newsletter enthalten einen sogenannte „web-beacon“, d. h., eine pixelgroße Datei, die beim Öffnen des Newsletters von unserem Server, bzw., sofern wir einen Versanddienstleister einsetzen, von dessen Server abgerufen wird. Im Rahmen dieses Abrufs werden zunächst technische Informationen, wie Informationen zum Browser und Ihrem System, als auch Ihre IP-Adresse und der Zeitpunkt des Abrufs, erhoben.

Diese Informationen werden zur technischen Verbesserung unseres Newsletters anhand der technischen Daten oder der Zielgruppen und ihres Leseverhaltens auf Basis ihrer Abruforte (die mit Hilfe der IP-Adresse bestimmbar sind) oder der Zugriffszeiten genutzt. Diese Analyse beinhaltet ebenfalls die Feststellung, ob die Newsletter geöffnet werden, wann sie geöffnet werden und welche Links geklickt werden. Diese Informationen können aus technischen Gründen zwar den einzelnen Newsletterempfängern zugeordnet werden. Es ist jedoch weder unser Bestreben noch, sofern eingesetzt, das des Versanddienstleisters, einzelne Nutzer zu beobachten. Die Auswertungen dienen uns vielmehr dazu, die Lesegewohnheiten unserer Nutzer zu erkennen und unsere Inhalte an sie anzupassen oder unterschiedliche Inhalte entsprechend den Interessen unserer Nutzer zu versenden.

Die Auswertung des Newsletters und die Erfolgsmessung erfolgen, vorbehaltlich einer ausdrücklichen Einwilligung der Nutzer, auf Grundlage unserer berechtigten Interessen zu Zwecken des Einsatzes eines nutzerfreundlichen sowie sicheren Newslettersystems, welches sowohl unseren geschäftlichen Interessen dient, als auch den Erwartungen der Nutzer entspricht.

Ein getrennter Widerruf der Erfolgsmessung ist leider nicht möglich, in diesem Fall muss das gesamte Newsletterabonnement gekündigt, bzw. muss ihm widersprochen werden.

Die Datenschutzerklärung des Dienstanbieters Mailchimp, Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, finden Sie hier: https://mailchimp.com/legal/privacy/.

Legal basis for the data processing

Legal basis for the processing of data after registration to the newsletter by the user is Art. 6 Para. 1 lit. a GDPR if there exists a consent of the user.

Purpose of data processing

The collection of the e-mail address of the user serves to deliver the newsletter.

The colletion of other personal data as part of the registration process serves to prevent the abuse of the services or the used e-mail address.

Storage period

The data will be deleted as soon as they won't be necessary anymore for the fulfillment of  the purpose of their collection. According to this, the e-mail address of the user will be stored as long as the newsletter subscription would be active.

The other personal data collected during the registration process generally will be deleted after a period of seven days.

Option of opposition and removal

The subscription to the newsletter can be unsubscribed anytime by the affected user. For this purpose ther is a corresponding link in every newsletter.

Hierdurch wird ebenfalls ein Widerruf der Einwilligung der Speicherung der während des Anmeldevorgangs erhobenen personenbezogenen Daten ermöglicht. Die Rechtmäßigkeit der bereits erfolgten Datenverarbeitungsvorgänge bleibt vom Widerruf unberührt.

Die von Ihnen zum Zwecke des Newsletter-Bezugs bei uns hinterlegten Daten werden von uns bis zu Ihrer Austragung aus dem Newsletter bei uns bzw. dem Newsletterdiensteanbieter gespeichert und nach der Abbestellung des Newsletters aus der Newsletterverteilerliste gelöscht. Daten, die zu anderen Zwecken bei uns gespeichert wurden bleiben hiervon unberührt.

Nach Ihrer Austragung aus der Newsletter-Verteilerliste wird Ihre E-Mail-Adresse bei uns bzw. dem Newsletter-Diensteanbieter ggf. in einer Blacklist gespeichert, um künftige Mailings zu verhindern. Die Daten aus der Blacklist werden nur für diesen Zweck verwendet und nicht mit anderen Daten zusammengeführt. Dies dient sowohl Ihrem Interesse als auch unserem Interesse an der Einhaltung der gesetzlichen Vorgaben beim Versand von Newslettern (berechtigtes Interesse im Sinne des Art. 6 Para. 1 lit. f GDPR). Die Speicherung in der Blacklist ist zeitlich nicht befristet. Sie können der Speicherung widersprechen, sofern Ihre Interessen unser berechtigtes Interesse überwiegen.

6. Order processing

The data you submit when ordering goods and/or services from us will have to be processed in order to fulfill your order. Please note that orders cannot be processed without providing this data.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR.

After your order has been completed, your personal data will be deleted, but only after the retention periods required by tax and commercial law.

In order to process your order, we will share your data with the shipping company responsible for delivery to the extent required to deliver your order and/or with the payment service provider to the extent required to process your payment.

The legal basis for the transfer of this data is Art. 6 Para. 1 lit. b) GDPR.

7. Plugins und Tools

YouTube with extended data protection

This website embeds videos from YouTube. The website operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Irland.

Wir nutzen YouTube im erweiterten Datenschutzmodus. Dieser Modus bewirkt laut YouTube, dass YouTube keine Informationen über die Besucher auf dieser Website speichert, bevor diese sich das Video ansehen. Die Weitergabe von Daten an YouTube-Partner wird durch den erweiterten Datenschutzmodus hingegen nicht zwingend ausgeschlossen. So stellt YouTube – unabhängig davon, ob Sie sich ein Video ansehen – eine Verbindung zum Google DoubleClick-Netzwerk her.

Sobald Sie ein YouTube-Video auf dieser Website starten, wird eine Verbindung zu den Servern von YouTube hergestellt. Dabei wird dem YouTube-Server mitgeteilt, welche unserer Seiten Sie besucht haben. Wenn Sie in Ihrem YouTube-Account eingeloggt sind, ermöglichen Sie YouTube, Ihr Surfverhalten direkt Ihrem persönlichen Profil zuzuordnen. Dies können Sie verhindern, indem Sie sich aus Ihrem YouTube-Account ausloggen.

Des Weiteren kann YouTube nach Starten eines Videos verschiedene Cookies auf Ihrem Endgerät speichern oder vergleichbare Wiedererkennungstechnologien (z.B. Device-Fingerprinting) einsetzen. Auf diese Weise kann YouTube Informationen über Besucher dieser Website erhalten. Diese Informationen werden u. a. verwendet, um Videostatistiken zu erfassen, die Anwenderfreundlichkeit zu verbessern und Betrugsversuchen vorzubeugen.

Gegebenenfalls können nach dem Start eines YouTube-Videos weitere Datenverarbeitungsvorgänge ausgelöst werden, auf die wir keinen Einfluss haben.

Die Nutzung von YouTube erfolgt im Interesse einer ansprechenden Darstellung unserer Online-Angebote. Dies stellt ein berechtigtes Interesse im Sinne von Art. 6 Para. 1 lit. f DSGVO dar. Sofern eine entsprechende Einwilligung abgefragt wurde, erfolgt die Verarbeitung ausschließlich auf Grundlage von Art. 6 Para. 1 lit. a GDPR; die Einwilligung ist jederzeit widerrufbar.

Further information about data protection at YouTube you can find in there data protection declaration here: https://policies.google.com/privacy?hl=de.

FontAwesome

In order to be able to display fonts and visual elements of our website, we use FontAwesome’s external fonts. FontAwesome is a service of

Fonticons Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA, hereinafter referred to as "FontAwesome".

When you access our website, a connection is established to the FontAwesome server in the USA in order to enable and update the display of fonts and visual elements.

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the optimisation and economic operation of our website.

By connecting to the FontAwesome server when you access our website, FontAwesome can determine from which website your request was sent and to which IP address the font should be sent.

At https://fontawesome.com/privacy

FontAwesome offers further information, in particular on the options for preventing data use.

Web analytics by Google Analytics

Scale of processing of personal data

This website uses functions of the web analysis service Google Analytics. Supplier is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics uses “cookies”. These are text files stored on your computer allowing an analysis of your website usage. The information about your use of this website created by the cookie will be normally transmitted to a Google server in the USA and stored there.

If you go to single pages of our website, the following data will be stored:

  1. Two bytes of the IP address of the calling user's system
  2. The acceded website
  3. The Website from which the user got to the called website (Referrer)
  4. The subpages called from the called website
  5. The dwell time on the website
  6. The frequency of going to the website

The software ist configurated that the IP addresses won't be stored completely, but 2 bytes of the IP address will be masked (example: 192.168.xxx.xxx). By this means, an attribution of the shroted IP address to the calling computer is no longer possible. Only in exceptional cases the full IP address will be transferred to a server of Google in the USA and be shortened there.

However, in the case of activation IP anonymisation on this website your IP address is previously shortened by Google within the member states of the European Union or other contracting states of the Agreement on the European Economic Area. On behalf of the website operator Google will use this information to evaluate your use of this website, to report on the website activities and to provide the website operator with additional services related to the use of the website and the internet. Within the scope of Google Analytics the IP address transmitted by your browser will not brought together with other Google data.

Legal basis for the processing of personal data

Legal basis for the processing of perspnal data of the user is Art. 6 Para. 1 lit. f GDPR.

Purpose of data processing

The processing of personal data of the user enables us to analyze the surfing behaviour of our users. By evaluating the obtained data we are able to assemble information about the usage of the particular components  of our website. This helps us to improve its usability permanentely. In this purposes lies also an eligible interest in processing the data according to Art. 6 Para. 1 lit. f GDPR. By anonymizing the IP address we adequately take account of the user's interest of protecting his personal data.

Storage period

The data will be deleted as soon as they won't be necessary for our record purposes anymore.

In our case, this will be the case after seven days.

Option of opposition and removal

Cookie will be recorded on the computer of the user and from there transmitted to our site. Because of that, you have also the full control overthe use of cookies. By changing the settings in your web browser you can deactivate or limit the transfer of cookies. Already recorded cookies can be deleted at any time. This can also take place automatically. If you deactivate cookies for our website, possibly not all the functions of the website could be used comprehensively.

Beyond that, you can prohibit the collection of data produced by the cookie and related to your usage of the website (including your IP address) to Google as well as a processing of these data by Google by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de

You can forbid the storage of cookies by an appropriate adjustment of your browser software; however, we point to the fact that in this case you possibly could not use every website function to its full extent.
Furthermore, you can prevent the data transmission to Google and the data procession by Google by means of the cookie and with regard to your use of the website (including your IP address) by downloading and installing the browser plugin available at this link: http://tools.google.com/dlpage/gaoptout?hl=de

Additionally or as alternative to the browser add-on you can prevent the tracking by Google Analytics on our sites by clicking on this link: . Doing so an opt-out cookie will be installed on your device. This prevents the acquisition by Google Analytics for this website and for this browser in the future as long as the cookie stays installed in your browser.

Further information about the data protection guidelines of Google you can find here: https://www.google.com/intl/de/policies/privacy/.

Facebook-Pixel

This website uses the "visitor's action pixel" of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA). So kann das Verhalten von Nutzern nachverfolgt werden, nachdem diese durch Klick auf eine Facebook-Werbeanzeige auf die Website des Anbieters weitergeleitet wurden. Dieses Verfahren dient dazu, die Wirksamkeit der Facebook-Werbeanzeigen für statistische und Marktforschungszwecke auszuwerten und kann dazu beitragen, zukünftige Werbemaßnahmen zu optimieren. Die erhobenen Daten sind für uns anonym, bieten uns also keine Rückschlüsse auf die Identität der Nutzer. Allerdings werden die Daten von Facebook gespeichert und verarbeitet, sodass eine Verbindung zum jeweiligen Nutzerprofil möglich ist und Facebook die Daten für eigene Werbezwecke, entsprechend der Facebook-Datenverwendungsrichtlinie (https://www.facebook.com/about/privacy/ ) verwenden kann. Sie können Facebook sowie dessen Partnern das Schalten von Werbeanzeigen auf und außerhalb von Facebook ermöglichen. Es kann ferner zu diesen Zwecken ein Cookie auf Ihrem Rechner gespeichert werden. Bitte klicken Sie hier, wenn Sie Ihre Einwilligung widerrufen möchten: www.facebook.com/ads/website_custom_audiences/

Wir nutzen den Facebook Pixel, um unsere Internetseite bedarfsgerecht zur gestalten und sie zu bewerben (berechtigtes Interessen gem. Art. 6 (1) lit f. DSGVO).

Use of reCAPTCHA

Our website uses Google reCAPTCHA to check and prevent automated servers ("bots") from accessing and interacting with our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland (hereinafter: Google).

Through certification according to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google guarantees that it will follow the EU's data protection regulations when processing data in the United States.

This service allows Google to determine from which website your request has been sent and from which IP address the reCAPTCHA input box has been used. In addition to your IP address, Google may collect other information necessary to provide and guarantee this service.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.

Google offers detailed information at https://policies.google.com/privacy concerning the general handling of your user data.

8. Other online presences

Twitter

We maintain an online presence on Twitter to present our company and our services and to communicate with customers/prospects. Twitter is a service provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to Twitter. Twitter Inc. is certified under the Privacy Shield and committed to adhering to European privacy standards.

https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

The privacy policy of Twitter can be found at https://twitter.com/privacy

Pinterest

We maintain an online presence on Pinterest to present our company and our services and to communicate with customers/prospects. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to Pinterest. Pinterest Inc. is certified under the Privacy Shield and committed to comply with European privacy standards.

https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active

The Pinterest privacy policy can be found here: https://policy.pinterest.com/de/privacy-policy

YouTube

We maintain an online presence on YouTube to present our company and our services and to communicate with customers/prospects. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA.

We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to YouTube. Google LLC is certified under the Privacy Shield and committed to comply with European privacy standards.

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

The YouTube privacy policy can be found here: https://policies.google.com/privacy

LinkedIn

We maintain an online presence on LinkedIn to present our company and our services and to communicate with customers/prospects. LinkedIn is a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

We would like to point out that this might cause user data to be processed outside the European Union, particularly in the United States. This may increase risks for users that, for example, may make subsequent access to the user data more difficult. We also do not have access to this user data. Access is only available to LinkedIn. LinkedIn Corporation is certified under the Privacy Shield and committed to comply with European privacy standards.

https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

The LinkedIn privacy policy can be found here: https://www.linkedin.com/legal/privacy-policy

Facebook

To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Facebook platform.

On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

The data protection officer of Facebook can be reached via this contact form: https://www.facebook.com/help/contact/540977946302970

We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.

The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.

When accessing our online presence on the Facebook platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).

This data of the user is used for statistical information on the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Facebook based on your interests. If you are logged into Facebook at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.

If you contact us via Facebook, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.

Facebook Ireland Ltd. might also set cookies when processing your data.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Facebook may be fully usable.

Details on the processing activities, their suppression, and the deletion of the data processed by Facebook can be found in its privacy policy: https://www.facebook.com/privacy/explanation

It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.

Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Instagram

To advertise our products and services as well as to communicate with interested parties or customers, we have a presence on the Instagram platform.

On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The data protection officer of Instagram can be reached via this contact form:

https://www.facebook.com/help/contact/540977946302970

We have defined the joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the reciprocal obligations, is available at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the processing of the resulting and subsequently disclosed personal data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.

The legal basis may also be your consent per Art. 6 para. 1 lit. a GDPR granted to the platform operator. Per Art. 7 para. 3 GDPR, you may revoke this consent with the platform operator at any time with future effect.

When accessing our online presence on the Instagram platform, Facebook Ireland Ltd. as the operator of the platform in the EU will process your data (e.g. personal information, IP address, etc.).

This data of the user is used for statistical information on the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes as well as for the creation of user profiles. Based on these profiles, Facebook Ireland Ltd. can provide advertising both within and outside of Instagram based on your interests. If you are logged into Instagram at the time you access our site, Facebook Ireland Ltd. will also link this data to your user account.

If you contact us via Instagram, the personal data your provide at that time will be used to process the request. We will delete this data once we have completely responded to your query, unless there are legal obligations to retain the data, such as for subsequent fulfillment of contracts.

Facebook Ireland Ltd. might also set cookies when processing your data.

If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Cookies that have already been saved can be deleted at any time. The instructions to do this depend on the browser and system being used. For Flash cookies, the processing cannot be prevented by the settings in your browser, but instead by making the appropriate settings in your Flash player. If you prevent or restrict the installation of cookies, not all of the functions of Instagram may be fully usable.

Details on the processing activities, their suppression, and the deletion of the data processed by Instagram can be found in its privacy policy: https://help.instagram.com/519522125107875

It cannot be excluded that the processing by Facebook Ireland Ltd. will also take place in the United States by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025.

Facebook Inc. has submitted to the EU-US Privacy Shield, thereby complying with the data protection requirements of the EU when processing data in the USA.

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Social media links via graphics

We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.

Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States.

Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.

The following social networks are integrated into our site by linked graphics:

Facebook

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.

Privacy Policy: https://www.facebook.com/policy.php

EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

twitter

Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA

Privacy Policy: https://twitter.com/privacy

EU-US Privacy Shield: https://www.privacyshield.gov/…0000TORzAAO&status=Active

Pinterest

Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

Privacy Policy: https://policy.pinterest.com/de/privacy-policy

EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active

YouTube

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA

Privacy Policy: https://policies.google.com/privacy

EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Irland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 USA.

Privacy Policy: https://www.linkedin.com/legal/privacy-policy

EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

(Sources: see Disclaimer of www.e-recht24.de Sören Siebert, Attorney, Weiß & Partner, www.ratgeberrecht.eu)

Copyright© 2020 – Sundragon.de