We are pleased that you are visiting our website. The protection of your personal data is very important to us. Personal data refers to information about the personal or factual circumstances of an identified or identifiable natural person. This includes, for example, your full name, address, phone number, and date of birth, as well as any other data that can be linked to an identifiable person.
Since personal data is subject to special legal protection, we collect it only to the extent necessary for providing our website and delivering our services. Below, we explain what personal information we collect during your visit to our website and how we use it.
Our data protection practices comply with legal regulations, in particular those of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG), and the EU General Data Protection Regulation (GDPR). We will collect, process, and store your personal data exclusively to the extent necessary to ensure the proper functioning of this website and the provision of our content and services, as well as to process inquiries and, where applicable, to fulfill orders/contracts, but only to the extent that there is a legitimate interest within the meaning of Article 6(1), sentence 1, letter f of the GDPR or another legal basis for such processing. Only if you have previously given your separate consent will your data also be used for additional purposes specifically defined in the consent, e.g., for sending promotional information via a newsletter.
The controller within the meaning of the GDPR and other national data protection laws of the Member States, as well as other data protection regulations, is:
Sarah Schreiner
The Closing of the Cross
07630 Campos
Email: info@xxlluxorbullys.com
Phone: +49 176 83425516
Every time our website is accessed, our system automatically collects data and information from the accessing computer's system. The following data is collected:
(1) Information about the browser type and version used
(2) The operating system of the device used to access the site
(3) The IP address of the device used to access the site
(4) Date and time of access
(5) Websites and resources (images, files, other page content) accessed on our website.
(6) Websites from which the user’s system accessed our website (referrer tracking)
This data is stored in our system's log files. This data is not stored together with the personal data of any specific user, so individual site visitors cannot be identified.
Our website offers various features, and when you use them, we collect, process, and store personal data. Below, we explain what happens to this data:
NEWSLETTER SUBSCRIPTION FORM:
COMMENT FEATURE:
CONTACT FORM(S):
When you access this website or individual files on the website, we collect, process, and store the following data: IP address, the website from which the file was accessed, the file name, the date and time of access, the amount of data transferred, and a notification of whether the access was successful (a so-called web log). We use this access data exclusively in a non-personalized form to continuously improve our website and for statistical purposes.
We also use the following web trackers to analyze visits to this website:
GOOGLE ANALYTICS
SCOPE OF THE PROCESSING OF PERSONAL DATA
On our website, we use the web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of its web tracking, Google Analytics uses cookies that are stored on your computer and enable an analysis of how our website is used and your browsing behavior (so-called tracking). We conduct this analysis using the Google Analytics tracking service to continuously optimize our website and improve its usability. When you use our website, data—including, in particular, your IP address and user activity—is transmitted to servers operated by Google Ireland Limited and processed and stored outside the European Union, e.g., in the United States.
The European Commission has determined that an adequate level of data protection may exist in the United States if the data-processing company has submitted to the U.S.-EU Privacy Shield Framework and the data transfer to the United States has been structured in a manner that is permissible under this framework. By enabling IP anonymization within the Google Analytics tracking code on this website, your IP address is anonymized by Google Analytics prior to transmission. This website uses a Google Analytics tracking code that has been extended to include the operator `gat._anonymizeIp();` to ensure that IP addresses are collected only in anonymized form (so-called IP masking).
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Art. 6(1)(a) of the GDPR (Consent), either as part of the registration process with Google (creating a Google account and accepting the privacy policy provided there) or, if you have not registered with Google, by giving your explicit consent when you visit our website.
PURPOSE OF DATA PROCESSING
On our behalf, Google will use this information to evaluate your visit to this website, compile reports on website activity, and provide us with other services related to website and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be combined with any other data held by Google Ireland Limited.
DURATION OF STORAGE
Google will store the data relevant to web tracking for as long as necessary to fulfill the web service that has been booked. Data is collected and stored in an anonymized form. If the data can be linked to an individual, it will be deleted immediately, provided it is not subject to any statutory retention requirements. In any case, the data will be deleted once the retention period has expired.
OPPORTUNITIES FOR OBJECTION AND REMEDY
You can prevent the collection and transmission of personal data to Google (in particular your IP address) as well as the processing of this data by Google by disabling the execution of script code in your browser, installing a script blocker in your browser (you can find one, for example, at www.noscript.net or www.ghostery.com ), or enabling the “Do Not Track” setting in your browser. You can also prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de ). Google’s security and privacy policies can be found at https://policies.google.com/privacy
FACEBOOK CONNECT / LOGIN
On our website, we use a web tracking service provided by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland (hereinafter: Facebook Connect / Login). As part of its web tracking, Facebook Connect / Login uses cookies that are stored on your computer and enable an analysis of how our website is used and your browsing behavior (so-called “tracking”). We conduct this analysis using the Facebook Connect / Login tracking service to continuously optimize our website and improve its usability. When you use our website, data—including, in particular, your IP address and your user activities—is transmitted to servers operated by Facebook Connect / Login and processed and stored outside the European Union, e.g., in the United States. The legal basis for data processing is Article 6(1)(a) of the GDPR. Facebook Connect / Login has self-certified under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. For more information on how the transferred data is handled, please see the Facebook Connect / Login Privacy Policy: https://www.facebook.com/about/privacy. You can prevent the collection and transmission of personal data (in particular your IP address) as well as the processing of this data by disabling the execution of script code in your browser, installing a script blocker in your browser (you can find one, for example, at www.noscript.netoderwww.ghostery.com ), or enabling the “Do Not Track” setting in your browser.
FACEBOOK CUSTOM AUDIENCE
On our website, we use a web tracking service provided by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland (hereinafter: Facebook Custom Audience). As part of this web tracking, Facebook Custom Audience uses cookies that are stored on your computer and enable an analysis of how our website is used and of your browsing behavior (so-called “tracking”). We conduct this analysis using the Facebook Custom Audience tracking service to continuously optimize our website and improve its usability. When you use our website, data—including, in particular, your IP address and your user activities—is transmitted to servers operated by Facebook Custom Audience and processed and stored outside the European Union, e.g., in the United States. The legal basis for data processing is Article 6(1)(a) of the GDPR. Facebook Custom Audience has self-certified under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. For more information on how the transferred data is handled, please see the Facebook Custom Audience Privacy Policy: https://www.facebook.com/about/privacy. You can prevent the collection and transmission of personal data (in particular your IP address) as well as the processing of this data by disabling the execution of script code in your browser, installing a script blocker in your browser (you can find one, for example, at www.noscript.netoderwww.ghostery.com ), or enabling the “Do Not Track” setting in your browser.
On our website, we use active JavaScript content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing a JavaScript blocker, such as the “NoScript” browser plug-in (www.noscript.net ), or by disabling JavaScript in your browser. Doing so may result in limited functionality on the websites you visit.
We use the following external web services:
A web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google. The legal basis for data processing is Article 6(1)(f) of the GDPR. The legitimate interest lies in ensuring the error-free functioning of the website. Google has self-certified under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. For more information on how the transferred data is handled, please refer to Google’s Privacy Policy: https://policies.google.com/privacy. You can prevent Google from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find one, for example, at www.noscript.net or www.ghostery.com ).
GOOGLE APIS
Our website loads a web service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google APIs). We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google APIs. The legal basis for data processing is Article 6(1)(f) of the GDPR. The legitimate interest lies in ensuring the error-free functioning of the website. Google APIs has self-certified under the EU-U.S. Privacy Shield Framework (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. For more information on how the transferred data is handled, please refer to the Google APIs Privacy Policy: https://policies.google.com/privacy. You can prevent Google-Apis from collecting and processing your data by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find one, for example, at www.noscript.net or www.ghostery.com ).
CLICK TIP
A web service provided by KLICK-TIPP LIMITED, 15 Cambridge Court, W6 7NJ London, UK (hereinafter: klick-tipp) is loaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to klick-tipp. The legal basis for data processing is Article 6(1)(f) of the GDPR. The legitimate interest lies in ensuring the website functions properly. The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can prevent the collection and processing of your data by klick-tipp by disabling the execution of script code in your browser or by installing a script blocker in your browser (you can find these, for example, at
, www.noscript.net, or www.ghostery.com ).
SOCIAL PLUG-IN – “FACEBOOK”
SCOPE OF THE PROCESSING OF PERSONAL DATA
We have integrated a social plug-in from the social network “Facebook” into our website, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland (“Facebook”). When you visit a page that contains such a plug-in, your browser automatically establishes a background connection to Facebook’s servers. The content of the plug-in is transmitted directly from Facebook to your browser and is merely integrated into our site. Through this integration, Facebook receives the information that your browser has loaded a specific page of our website. This applies even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in Ireland and stored there. If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plug-ins—for example, by clicking the “Like” button or posting a comment—this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook contacts whom you have authorized to view it.
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Art. 6(1)(a) of the GDPR (if you have registered with “Facebook”) and Art. 6(1)(f) of the GDPR (if you have not registered with Facebook). To the extent that processing is based on Article 6(1), first sentence, (f) of the GDPR, the website operator’s legitimate interest is to enable users to interact with the website operator’s content on Facebook.
PURPOSE OF DATA PROCESSING
The primary purpose of data collection is to offer you a way to interact socially through Facebook and thereby make our website more interactive. For information on the scope of data collection and the further processing and use of the data you provide by Facebook, as well as your rights in this regard and the settings available to protect your privacy, please refer to Facebook’s Privacy Policy: (https://www.facebook.com/about/privacy ).
DURATION OF STORAGE
Facebook will store the data relevant to the provision of the web service for as long as necessary. To the extent that the data is subject to statutory retention requirements, it will be deleted once the retention period has expired.
OPPORTUNITIES FOR OBJECTION AND REMEDY
If you do not want the Facebook social plug-in to run, you can block it by installing a so-called script blocker, such as “NoScript.” If you do not want Facebook to associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also specifically prevent the Facebook plug-ins from loading by using add-ons for your browser. For Mozilla Firefox, you can find the appropriate plug-ins by searching here:
https://addons.mozilla.org/de/firefox/
For Opera, you can find the appropriate plug-ins by searching here:
https://addons.opera.com/de/
For Chrome, you can find the appropriate plug-ins by searching here:
https://chrome.google.com/webstore/category/extensions?hl=de
The options for objection and removal are otherwise governed by the general provisions regarding the right to object and the right to erasure under data protection law, as described later in this Privacy Policy.
SCOPE OF THE PROCESSING OF PERSONAL DATA
We use cookies on various pages to enable the use of certain features of our website. These so-called “cookies” are small text files that your browser can store on your computer. These text files contain a unique string of characters that allows your browser to be uniquely identified when you visit our website again. The process of storing a cookie file is also referred to as “setting a cookie.”
LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
Art. 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest consists of maintaining the full functionality of our website, improving its usability, and enabling a more personalized customer experience. We can only identify individual website visitors using cookie technology if the visitor has previously provided us with the relevant personal data based on separate consent.
PURPOSE OF DATA PROCESSING
Cookies are set by our website to ensure that our website functions properly and to improve its usability. In addition, cookie technology allows us to recognize individual visitors using pseudonyms—such as a unique, arbitrary ID—so that we can offer more personalized services.
DURATION OF STORAGE
Our cookies are stored until you delete them from your browser or, in the case of a session cookie, until the session expires.
OPPORTUNITIES FOR OBJECTION AND REMEDY
You can configure your browser yourself according to your preferences to generally prevent cookies from being set. You can then decide on a case-by-case basis whether to accept cookies or accept them by default. Cookies can be used for various purposes, such as to recognize that your computer has previously connected to our website (persistent cookies) or to save the pages you last viewed (session cookies). We use cookies to provide you with an enhanced user experience. To take advantage of our convenience features, we recommend that you allow cookies for our website. The options for objecting to and deleting cookies are otherwise governed by the general provisions regarding the right to object and the right to erasure under data protection law, as described later in this Privacy Policy.
Your personal data is protected through technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. In the case of unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems; therefore, we recommend encrypted communication or sending information by mail for information requiring a high level of confidentiality.
You have the right to receive information about your stored data free of charge at reasonable intervals, as well as the right to have your data corrected, blocked, or deleted at any time. We will delete your data upon your first request, provided that no legal regulations prevent us from doing so. You may therefore revoke any permission you have granted us to use your personal data at any time. Requests for access, deletion, or correction of your data, as well as any suggestions, may be sent at any time to the following address:
Sarah Schreiner
The Closing of the Cross
07630 Campos
Email: info@xxlluxorbullys.com
Phone: +49 176 83425516
You have the right to request that we provide you with the personal data you have submitted to us in a structured, commonly used, and machine-readable format. You may also request that we transfer this data to a third party without delay upon your first instruction, provided that the processing is based on consent pursuant to Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, and the processing by us is carried out by automated means.
When exercising this right to data portability, you also have the right to have the personal data concerning you transmitted directly to another controller, provided this is technically feasible. This must not infringe upon the freedoms and rights of others.
The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
If you suspect that your data is being processed unlawfully on our website, you may, of course, seek a judicial resolution of the matter at any time. Regardless of this, you have the option of contacting a supervisory authority. You have the right to file a complaint in the EU member state where you reside, where you work, and/or where the alleged violation occurred; that is, you may choose the supervisory authority to which you wish to submit your complaint based on the locations mentioned above. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.
