Privacy policy and legal notice
This privacy policy informs you about the nature, scope and purposes of processing personal data (hereinafter referred to as “data”) within our online offering and the websites, functions and content associated with it, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as the “online offering”). With regard to the terms used, such as “processing” or “controller,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Controller
Mira Rani
6 A Balaji Gardens
Coimbatore, Tamil Nadu
INDIA
Email address: mail@biglittleindia.com
Types of data processed:
– Inventory data (e.g., names, addresses).
– Contact data (e.g., email, telephone numbers).
– Content data (e.g., text entries, photographs, videos).
– Usage data (e.g., websites visited, interest in content, access times).
– Meta/communication data (e.g., device information, IP addresses).
Categories of data subjects
Visitors and users of the online offering (hereinafter we also collectively refer to the data subjects as “users”).
Purposes of processing
– Provision of the online offering, its functions and content.
– Responding to contact requests and communicating with users.
– Security measures.
– Reach measurement/marketing.
Terms used
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and covers practically any handling of data.
“Pseudonymization” means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Relevant legal bases
In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. Unless the legal basis is specified in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR; the legal basis for processing for the performance of our services and carrying out contractual measures as well as responding to inquiries is Art. 6(1)(b) GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) GDPR; and the legal basis for processing to safeguard our legitimate interests is Art. 6(1)(f) GDPR. In the event that vital interests of the data subject or of another natural person make the processing of personal data necessary, Art. 6(1)(d) GDPR serves as the legal basis.
Security measures
In accordance with Art. 32 GDPR, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing as well as the varying likelihood and severity of risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access, input, transfer, securing availability, and separation of the data. Furthermore, we have established procedures that ensure the exercise of data subjects’ rights, deletion of data, and response to threats to data. We also consider the protection of personal data in the development or selection of hardware, software and procedures, in accordance with the principle of data protection by design and by default (Art. 25 GDPR).
Cooperation with processors and third parties
If, in the course of processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, we do so only on the basis of a legal permission (e.g., if transmission of the data to third parties, such as payment service providers, is required for contract performance pursuant to Art. 6(1)(b) GDPR), you have given consent, a legal obligation provides for this, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.).
If we commission third parties to process data on the basis of a so-called “data processing agreement,” this is done on the basis of Art. 28 GDPR.
Transfers to third countries
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in the context of using third-party services or disclosure or transmission of data to third parties, this will only be done if it is necessary for the fulfillment of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. That is, processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection equivalent to that of the EU (e.g., for the USA through the “Privacy Shield”) or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”).
Rights of data subjects
You have the right to request confirmation as to whether data concerning you are being processed and to obtain information about these data as well as further information and a copy of the data in accordance with Art. 15 GDPR.
You have the right pursuant to Art. 16 GDPR to request the completion of data concerning you or the rectification of inaccurate data concerning you.
Pursuant to Art. 17 GDPR, you have the right to request that data concerning you be erased without delay, or alternatively pursuant to Art. 18 GDPR, to request restriction of processing of the data.
You have the right to receive the data concerning you that you have provided to us pursuant to Art. 20 GDPR and to request its transmission to other controllers.
You also have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR.
Right to withdraw consent
You have the right to withdraw consents granted pursuant to Art. 7(3) GDPR with effect for the future.
Right to object
You may object at any time to the future processing of data concerning you pursuant to Art. 21 GDPR. The objection may be made in particular against processing for direct marketing purposes.
Cookies and right to object to direct marketing
“Cookies” are small files that are stored on users’ computers. Various information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after their visit within an online offering. Temporary cookies, or “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online offering and closes their browser. For example, the contents of a shopping cart in an online shop or a login status can be stored in such a cookie. “Permanent” or “persistent” cookies are cookies that remain stored even after the browser is closed. For example, a login status can be saved if users visit after several days. Likewise, users’ interests can be stored in such a cookie, which is used for reach measurement or marketing purposes. “Third-party cookies” are cookies that are offered by providers other than the controller operating the online offering (otherwise, if they are only the controller’s cookies, they are called “first-party cookies”).
We may use temporary and permanent cookies and inform you about this in our privacy policy.
If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser’s system settings. Stored cookies can be deleted in the browser’s system settings. Excluding cookies may lead to functional limitations of this online offering.
A general objection to the use of cookies for online marketing purposes can be declared for many services, especially in the case of tracking, via the U.S. site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be prevented by disabling them in the browser settings. Please note that not all functions of this online offering may then be usable.
Deletion of data
The data we process will be deleted or processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated otherwise in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no statutory retention obligations preventing deletion. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. That is, the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.
Under German law, retention is in particular for 10 years pursuant to § 147(1) AO, § 257(1) nos. 1 and 4, (4) HGB (books, records, management reports, accounting records, commercial books, documents relevant for taxation, etc.) and 6 years pursuant to § 257(1) nos. 2 and 3, (4) HGB (commercial letters).
Under Austrian law, retention is in particular for 7 years pursuant to § 132(1) BAO (accounting records, receipts/invoices, accounts, receipts, business papers, statements of income and expenses, etc.), for 22 years in connection with real estate, and for 10 years for documents relating to services provided electronically, telecommunications, broadcasting and television services provided to non-entrepreneurs in EU member states and for which the Mini One-Stop Shop (MOSS) is used.
Business-related processing
In addition, we process
– Contract data (e.g., subject matter of the contract, term, customer category).
– Payment data (e.g., bank details, payment history)
of our customers, prospects and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.
Contractual services
We process the data of our contractual partners and prospects as well as other principals, clients or contractual partners (uniformly referred to as “contractual partners”) pursuant to Art. 6(1)(b) GDPR in order to provide our contractual or pre-contractual services to them. The data processed in this context, the type, scope and purpose and the necessity of their processing, are determined by the underlying contractual relationship.
The data processed include the master data of our contractual partners (e.g., names and addresses), contact data (e.g., email addresses and telephone numbers) as well as contract data (e.g., services used, contract contents, contractual communication, names of contact persons) and payment data (e.g., bank details, payment history).
We generally do not process special categories of personal data unless these are components of processing commissioned or required by contract.
We process data that are necessary for the establishment and performance of the contractual services and point out the necessity of their provision if this is not evident to the contractual partners. Disclosure to external persons or companies takes place only if it is necessary within the framework of a contract. When processing data provided to us in the context of an assignment, we act in accordance with the instructions of the principals as well as legal requirements.
When using our online services, we may store the IP address and the time of the respective user action. Storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. As a rule, this data is not passed on to third parties unless it is necessary to pursue our claims pursuant to Art. 6(1)(f) GDPR or there is a legal obligation pursuant to Art. 6(1)(c) GDPR.
Data are deleted when they are no longer required for the fulfillment of contractual or legal duties of care and for handling any warranty and comparable obligations, whereby the necessity of storing the data is reviewed every three years; otherwise, the statutory retention obligations apply.
External payment service providers
We use external payment service providers through whose platforms users and we can carry out payment transactions (each with a link to the privacy policy): PayPal (https://www.paypal.com/de/webapps/mpp/ua/privacy-full), Klarna (https://www.klarna.com/de/datenschutz/), Skrill (https://www.skrill.com/de/fusszeile/datenschutzrichtlinie/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://www.visa.de/datenschutz), Mastercard (https://www.mastercard.de/de-de/datenschutz.html), American Express (https://www.americanexpress.com/de/content/privacy-policy-statement.html).
In the context of contract fulfillment, we use payment service providers on the basis of Art. 6(1)(b) GDPR. Otherwise, we use external payment service providers on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR to offer our users effective and secure payment options.
The data processed by the payment service providers include inventory data such as name and address, bank data such as account numbers or credit card numbers, passwords, TANs and checksums as well as contract-, sum- and recipient-related information. The information is necessary to carry out the transactions. The data entered are processed only by the payment service providers and stored by them. That is, we do not receive any account or credit card-related information, but only information with confirmation or negative notification of the payment. In some circumstances, the payment service providers transmit the data to credit agencies. This transmission aims at identity and credit checks. For this, we refer you to the terms and privacy notices of the payment service providers.
For payment transactions, the terms and privacy notices of the respective payment service providers apply, which can be accessed within the respective websites or transaction applications. We also refer to them for further information and the assertion of withdrawal, access and other data subject rights.
Administration, financial accounting, office organization, contact management
We process data in the context of administrative tasks and organizing our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the course of providing our contractual services. The legal bases are Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR. Data subjects include customers, prospects, business partners and website visitors. The purpose and our interest in processing lie in administration, financial accounting, office organization, data archiving—i.e., tasks that serve to maintain our business operations, fulfill our duties and provide our services. Deletion of data with regard to contractual services and contractual communication corresponds to the information given for these processing activities.
We disclose or transmit data to the tax authorities, advisors such as tax consultants or auditors as well as other fee offices and payment service providers.
Furthermore, based on our business interests, we store information about suppliers, organizers and other business partners, e.g., for later contact. We generally store these mostly company-related data permanently.
Business analyses and market research
In order to operate our business economically, recognize market trends and the wishes of contractual partners and users, we analyze the data available to us on business transactions, contracts, inquiries, etc. We process inventory data, communication data, contract data, payment data, usage data and metadata on the basis of Art. 6(1)(f) GDPR, whereby the data subjects include contractual partners, prospects, customers, visitors and users of our online offering.
The analyses serve the purpose of business evaluations, marketing and market research. In doing so, we may take into account the profiles of registered users with details, e.g., of the services they have used. The analyses are intended to increase user-friendliness, optimize our offering and improve our profitability. The analyses are for our purposes only and are not disclosed externally unless they are anonymous analyses with aggregated values.
If these analyses or profiles are personal, they are deleted or anonymized when users terminate their accounts, otherwise after two years from contract conclusion. Otherwise, overall business analyses and general trend determinations are prepared anonymously where possible.
Amazon Affiliate Program
On the basis of our legitimate interests (i.e., interest in the economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we participate in the Amazon EU affiliate program, which is designed to provide a means for websites to earn advertising fees by placing advertisements and links to Amazon.de (so-called affiliate system). That is, as an Amazon partner we earn from qualifying purchases.
Amazon uses cookies to track the origin of orders. Among other things, Amazon can recognize that you clicked the affiliate link on this website and subsequently purchased a product on Amazon.
Further information on data use by Amazon and options to object can be found in the company’s privacy policy: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.
Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or its affiliated companies.
Registration function
Users can create a user account. As part of the registration process, the required mandatory information is communicated to users and processed in accordance with Art. 6(1)(b) GDPR for the purpose of providing the user account. The data processed include in particular the login information (name, password and an email address). The data entered during registration are used for the purposes of using the user account and its purpose.
Users may be informed by email about information relevant to their user account, such as technical changes. If users have terminated their user account, their data relating to the user account will be deleted, subject to a legal retention obligation. It is the users’ responsibility to back up their data before the end of the contract in the event of termination. We are entitled to irretrievably delete all data stored during the term of the contract.
When using our registration and login functions and the user account, we store the IP address and the time of each user action. Storage is based on our legitimate interests as well as those of the users in protection against misuse and other unauthorized use. As a rule, this data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation pursuant to Art. 6(1)(c) GDPR. IP addresses are anonymized or deleted at the latest after 7 days.
Contacting us
When contacting us (e.g., via contact form, email, telephone or social media), users’ details are processed to handle the contact request and its processing pursuant to Art. 6(1)(b) (within contractual/pre-contractual relationships), Art. 6(1)(f) (other inquiries) GDPR. Users’ details may be stored in a customer relationship management system (“CRM system”) or comparable request organization.
We delete the inquiries if they are no longer required. We review the necessity every two years; statutory archiving obligations also apply.
Hosting and email delivery
The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services as well as technical maintenance services which we use for the purpose of operating this online offering.
In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects and visitors to this online offering based on our legitimate interests in an efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
Collection of access data and log files
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR about every access to the server on which this service is located (so-called server log files). The access data include the name of the website accessed, file, date and time of access, data volume transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider.
Log file information is stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been finally clarified.
Google AdSense with personalized ads
We use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on the basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR).
Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the AdSense service, with the help of which ads are displayed on our website and we receive remuneration for their display or other use. For these purposes, usage data, such as clicks on an ad and users’ IP addresses, are processed, whereby the IP address is shortened by the last two digits. Therefore, users’ data are processed in pseudonymized form.
We use AdSense with personalized ads. In doing so, Google draws conclusions about users’ interests on the basis of the websites visited or apps used and the user profiles thus created. Advertisers use this information to tailor their campaigns to those interests, which benefits both users and advertisers. For Google, ads are personalized if collected or known data determine or influence ad selection. This includes, among other things, previous search queries, activities, website visits, use of apps, demographic and location information. Specifically, this includes: demographic targeting, interest-based targeting, remarketing as well as targeting based on customer match lists and audience lists uploaded to DoubleClick Bid Manager or Campaign Manager.
Further information on data use by Google, settings and options to object can be found in Google’s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).
Google AdSense with non-personalized ads
We use the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), on the basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR).
Google is certified under the Privacy Shield agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
We use the AdSense service, with the help of which ads are displayed on our website and we receive remuneration for their display or other use. For these purposes, usage data, such as clicks on an ad and users’ IP addresses, are processed, whereby the IP address is shortened by the last two digits. Therefore, users’ data are processed in pseudonymized form.
We use AdSense with non-personalized ads. In this case, ads are not displayed on the basis of user profiles. Non-personalized ads do not rely on past user behavior. Contextual information is used for targeting, including coarse (e.g., city-level) geographic targeting based on the current location, content on the current website or app, and current search terms. Google prohibits any personalized targeting, including demographic targeting and targeting based on user lists.
Further information on data use by Google, settings and options to object can be found in Google’s privacy policy (https://policies.google.com/technologies/ads) and in the settings for the display of advertising by Google (https://adssettings.google.com/authenticated).
Online presences in social media
We maintain online presences within social networks and platforms in order to communicate with customers, prospects and users active there and to inform them about our services.
We point out that users’ data may be processed outside the European Union. This may result in risks for users because, for example, enforcing users’ rights may be more difficult. With regard to U.S. providers certified under the Privacy Shield, we note that they undertake to comply with the EU’s data protection standards.
Furthermore, users’ data are usually processed for market research and advertising purposes. For example, usage profiles can be created from usage behavior and resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to users’ interests. Cookies are usually stored on users’ computers for these purposes, in which users’ usage behavior and interests are stored. The usage profiles may also store data independently of the devices used by users (especially if users are members of the respective platforms and logged in there).
The processing of users’ personal data is based on our legitimate interests in effective information of users and communication with users pursuant to Art. 6(1)(f) GDPR. If users are asked by the respective providers for consent to data processing (i.e., declare their consent, e.g., by ticking a checkbox or confirming a button), the legal basis of processing is Art. 6(1)(a), Art. 7 GDPR.
For a detailed description of the respective processing and the options to object (opt-out), we refer to the information provided by the providers linked below.
Also, in the case of requests for information and the assertion of user rights, we point out that these can most effectively be asserted with the providers. Only the providers have access to users’ data and can take direct appropriate measures and provide information. Should you nevertheless need help, you can contact us.
– Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) – Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
– Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
– Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Policy/Opt-Out: http://instagram.com/about/legal/privacy/..
– Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA) – Privacy Policy/Opt-Out: https://about.pinterest.com/privacy-policy.
– LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.
Embedding of third-party services and content
Within our online offering and on the basis of our legitimate interests (i.e., interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR), we use content or service offerings of third-party providers to embed their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).
This always requires that the third-party providers of this content perceive users’ IP addresses, since they could not send the content to their browser without the IP address. The IP address is therefore required for the display of this content. We endeavor to use only content whose respective providers use the IP address solely for delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also referred to as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on users’ devices and contain, among other things, technical information about the browser and operating system, referring websites, visit time as well as other information on the use of our online offering, and may also be combined with such information from other sources.
Vimeo
We may embed videos from the “Vimeo” platform of Vimeo Inc., Attention: Legal Department, 555 West 18th Street, New York, New York 10011, USA. Privacy Policy: https://vimeo.com/privacy. We note that Vimeo may use Google Analytics and refer to Google’s privacy policy (https://www.google.com/policies/privacy) as well as opt-out options for Google Analytics (http://tools.google.com/dlpage/gaoptout?hl=en) or Google’s settings for data use for marketing purposes (https://adssettings.google.com/).
YouTube
We embed videos from the “YouTube” platform of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Fonts
We embed the “Google Fonts” of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google reCAPTCHA
We embed the function for recognizing bots, e.g., when entering data in online forms (“reCAPTCHA”) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
Google Maps
We embed maps of the “Google Maps” service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The data processed may include, in particular, users’ IP addresses and location data, which, however, are not collected without their consent (usually as part of the settings of their mobile devices). The data may be processed in the USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://adssettings.google.com/authenticated.
OpenStreetMap
We embed maps from the “OpenStreetMap” service (https://www.openstreetmap.de), which are offered on the basis of the Open Data Commons Open Database License (ODbL) by the OpenStreetMap Foundation (OSMF). Privacy Policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.
To our knowledge, the users’ data are used by OpenStreetMap solely for the purpose of displaying the map functions and temporarily storing the selected settings. These data may include, in particular, IP addresses and location data of users, which, however, are not collected without their consent (usually executed within the settings of their mobile devices).
The data may be processed in the USA. For more information, please refer to OpenStreetMap’s privacy policy: https://wiki.openstreetmap.org/wiki/Privacy_Policy.
Instagram
Within our online offering, functions and content of the Instagram service offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, may be embedded. These can include, for example, content such as images, videos or texts and buttons with which users can share content of this online offering within Instagram. If users are members of the Instagram platform, Instagram can assign the access to the above content and functions to the users’ profiles there. Instagram privacy policy: http://instagram.com/about/legal/privacy/.
Shariff sharing functions
We use the privacy-safe “Shariff” buttons. “Shariff” was developed to enable more privacy on the web and to replace the usual “share” buttons of social networks. In this case, it is not users’ browsers that establish a connection with the servers of the respective social media platforms, but the server on which this online offering is located, and it queries, for example, the number of likes, etc. The user remains anonymous. You can find more information about the Shariff project from the developers at the magazine c’t: www.ct.de.
Generated with Datenschutz-Generator.de by lawyer Dr. Thomas Schwenke
Newsletter
The following information explains the content of our newsletter as well as the subscription, dispatch and statistical evaluation procedures and your rights to object.
By subscribing to our newsletter, you agree to receive it and to the procedures described.
Newsletter content: We send newsletters, emails and other electronic notifications with potentially promotional information (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. If the contents of the newsletter are specifically described as part of a subscription, they are authoritative for users’ consent. Otherwise, our newsletters contain information about our events, and where applicable, about our services and us.
Double opt-in and logging: Subscribing to our newsletter takes place in a so-called double opt-in procedure. That is, after subscribing you will receive an email asking you to confirm your subscription. This confirmation is necessary so that no one can subscribe with third-party email addresses. Newsletter subscriptions are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation as well as the IP address. Changes to your data stored with the mailing service provider are also logged.
Subscription data: To subscribe to the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for the purpose of personal addressing in the newsletter.
The newsletter is sent and its performance measured on the basis of recipients’ consent pursuant to Art. 6(1)(a), Art. 7 GDPR in conjunction with § 7(2) no. 3 UWG, or on the basis of the legal permission pursuant to § 7(3) UWG.
Logging of the subscription process is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. Our interest is in the use of a user-friendly and secure newsletter system that serves both our interests and the expectations of users and also allows us to prove consents.
Termination/withdrawal: You can cancel receipt of our newsletter at any time, i.e., withdraw your consents. A link to cancel the newsletter can be found at the end of every newsletter. We may store unsubscribed email addresses for up to three years on the basis of our legitimate interests before we delete them for the purpose of sending the newsletter, in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.
Newsletter mailing service provider
The newsletter is sent using the mailing service provider MailPoet – a product of Wysija SARL, 6 rue Dieudé, 13006, Marseille, FRANCE. You can view the mailing service provider’s privacy policy here: https://www.mailpoet.com/privacy-notice/. The mailing service provider is used on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR and a data processing agreement pursuant to Art. 28(3) sentence 1 GDPR.
The mailing service provider MailPoet may use the data of recipients in pseudonymized form, i.e., without assignment to a user, to optimize or improve their own services, e.g., for technical optimization of sending and display of the newsletter or for statistical purposes. However, the mailing service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
Newsletter performance measurement
The newsletters contain a so-called “web beacon,” i.e., a pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a mailing service provider, from its server. As part of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected.
This information is used for technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can indeed be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the mailing service provider, to observe individual users. The analyses are much more intended to help us recognize the reading habits of our users and adapt our content to them or to send different content according to the interests of our users.