top of page

Data protection

We look forward to your visit to our website. The protection of your personal data is important to us. Personal data is information about the personal or factual circumstances of a specific or identifiable natural person. This includes, for example, the real name, address, telephone number and date of birth, but also all other data that can be related to an identifiable person.
Since personal data enjoy special legal protection, they are only collected by us insofar as this is necessary for the provision of our website and the provision of our services. In the following we show which personal information we collect during your visit to our website and how we use it.
Our data protection practice is in accordance with the legal regulations, in particular those of the Federal Data Protection Act (BDSG), the Telemedia Act (TMG) and the EU General Data Protection Regulation (GDPR). We will only collect, process and store your personal data insofar as this is necessary for the functional provision of this website and our content and services, as well as for processing inquiries and, if necessary, for processing orders / contracts, but only if there is one legitimate interest within the meaning of Art. 6 Para. 1 Clause 1 Letter f GDPR or any other legal basis exists. Your data will only be used for further purposes precisely defined in the consent, e.g. for sending promotional information by newsletter, if you have given your separate consent beforehand.

1. Responsible according to Art. 4 No. 7 GDPR

The person responsible within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is:

Sarah Schreiner

Carrer Costa i Llobera 32 Correos  

P.Box 84

07200 Felanitx Mallorca

Email: info@xxlluxorbullys.com

Tel .: +49 176 76551796

2. Provision of the website and creation of log files

Every time our website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

SCOPE OF THE PROCESSING OF THE DATA

(1) Information about the browser type and the version used
(2) The operating system of the access device
(3) The IP address of the retrieval device
(4) Date and time of access
(5) Websites and resources (images, files, other page content) that were accessed on our website.
(6) Websites from which the user's system reached our website (referrer tracking)

This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors are not identified.

  • LEGAL BASIS FOR PROCESSING PERSONAL DATA

    Article 6 (1) (f) GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

  • PURPOSE OF THE DATA PROCESSING

    The logging is done to maintain the compatibility of our website for all visitors as possible and to combat abuse and eliminate faults. For this it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and / or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

  • DURATION OF STORAGE

    The aforementioned technical data are deleted as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after our website has been accessed.

  • POSSIBILITY OF OBJECTION AND ELIMINATION

    The options for objection and elimination are based on the general provisions on the right to object under data protection law and the right to erasure described below in this data protection declaration.

3. Special functions of the website

Our site offers you various functions that we collect, process and save personal data when you use them. In the following we explain what happens to this data:

  • NEWSLETTER REGISTRATION FORM:
    • SCOPE OF PROCESSING OF PERSONAL DATA

      The data you entered when you registered for the newsletter.

    • LEGAL BASIS FOR PROCESSING PERSONAL DATA

      Art. 6 Paragraph 1 lit. a GDPR (consent through clear confirmatory action or behavior)

    • PURPOSE OF THE DATA PROCESSING

      The data recorded in the registration mask of our newsletter are used by us exclusively for sending our newsletter, in which we inform you about all our services and our news. After registering, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).

    • DURATION OF STORAGE

      You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link included in every newsletter. Your data will be deleted by us immediately after you unsubscribe. Likewise, if your registration is not completed, we will immediately delete your data. We reserve the right to delete without giving reasons and without prior or subsequent information.

    • POSSIBILITY OF OBJECTION AND ELIMINATION

      The options for objection and elimination are based on the general provisions on the right to object under data protection law and the right to erasure described below in this data protection declaration.

  • COMMENT FUNCTION:
    • SCOPE OF PROCESSING OF PERSONAL DATA

      The personal data you left in your comment.

    • LEGAL BASIS FOR PROCESSING PERSONAL DATA

      Art. 6 (1) (a) GDPR (consent through clear confirmatory action or behavior)

    • PURPOSE OF THE DATA PROCESSING

      Acceptance and publication of your comment on our website.

    • DURATION OF STORAGE

      Your comment will be saved and published indefinitely. We reserve the right to delete without giving reasons and without prior or subsequent information.

    • POSSIBILITY OF OBJECTION AND ELIMINATION

      We will delete your comments immediately upon your request. Please use the "delete function" for this or contact us. The options for objection and elimination are based on the general provisions on the right to object under data protection law and the right to erasure described below in this data protection declaration.

  • CONTACT FORM (E):
    • SCOPE OF PROCESSING OF PERSONAL DATA

      The data you have entered in our contact forms.

    • LEGAL BASIS FOR PROCESSING PERSONAL DATA

      Art. 6 Para. 1 lit.a GDPR (consent through clear confirmatory action or behavior)

    • PURPOSE OF THE DATA PROCESSING

      The data recorded via our contact form or via our contact forms will only be used to process the specific contact request received via the contact form.

    • DURATION OF STORAGE

      After your request has been processed, the data collected will be deleted immediately, provided there are no statutory retention periods.

    • POSSIBILITY OF OBJECTION AND ELIMINATION

      The options for objection and elimination are based on the general provisions on the right to object under data protection law and the right to erasure described below in this data protection declaration.

4. Statistical analysis of visits to this website - web tracker

When you access this website or individual files on the website, we collect, process and save the following data: IP address, website from which the file was accessed, name of the file, date and time of access, amount of data transferred and notification of success the retrieval (so-called web log). We use this access data exclusively in a non-personalized form for the continuous improvement of our website and for statistical purposes.
We also use the following web trackers to evaluate visits to this website:

  • GOOGLE ANALYTICS
    • SCOPE OF PROCESSING OF PERSONAL DATA

      On our site we use the web tracking service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics). As part of web tracking, Google Analytics uses cookies that are stored on your computer and that enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis on the basis of the Google Analytics tracking service in order to continuously optimize our website and make it more available. When you use our website, data, in particular your IP address and your user activities, are transmitted to the server of Google Ireland Limited and processed and stored outside the European Union, e.g. in the USA.
      The EU Commission has determined that an adequate level of data protection can exist in the USA if the data processing company has submitted to the US-EU Privacy Shield Agreement and data export to the USA has been made permissible in this way. By activating the IP anonymization within the Google Analytics tracking code of this website, your IP address will be anonymized by Google Analytics before transmission. This website uses a Google Analytics tracking code that has been expanded to include the operator gat._anonymizeIp (); has been expanded to only allow anonymous collection of IP addresses (so-called IP masking).

    • LEGAL BASIS FOR PROCESSING PERSONAL DATA

      Art. 6 (1) (a) GDPR (consent), either when registering with Google (opening a Google account and accepting the data protection information implemented there) or, if you have not registered with Google, by explicitly giving your consent when opening it our page.

    • PURPOSE OF THE DATA PROCESSING

      On our behalf, Google will use this information to evaluate your visit to this website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google Ireland Limited.

    • DURATION OF STORAGE

      Google will store the data relevant for the provision of web tracking for as long as it is necessary to fulfill the booked web service. The data is collected and saved anonymously. If there is a personal reference, the data will be deleted immediately, provided that it is not subject to any statutory retention requirements. In any case, the deletion takes place after the retention period expires.

    • POSSIBILITY OF OBJECTION AND ELIMINATION

      You can prevent the collection and forwarding of personal data to Google (especially your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser ( You can find this, for example, at www.noscript.net or www.ghostery.com ) or activate the "Do Not Track" setting in your browser. You can also prevent Google from collecting the data generated by the Google cookie and relating to your use of the website (including your IP address) and from processing this data by Google by clicking on the following link ( http: //tools.google.com/dlpage/gaoptout?hl=de ) download and install the available browser plug-in. You can find Google's security and data protection principles at https://policies.google.com/privacy

  • FACEBOOK CONNECT / LOGIN

    We use a web tracking service from Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland (hereinafter: Facebook Connect / Login) on our website. Facebook Connect / Login uses cookies as part of web tracking, which are stored on your computer and which enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis on the basis of the Facebook Connect / Login tracking service in order to continuously optimize our website and make it more available. When you use our website, data such as your IP address and your user activities are transmitted to the Facebook Connect / Login server and processed and stored outside the European Union, e.g. in the USA. The legal basis for data processing is Article 6 (1) (a) GDPR. Facebook Connect / Login has certified itself as part of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transferred data can be found in the data protection declaration of Facebook Connect / Login: https://www.facebook.com/about/privacy . You can prevent the collection and forwarding of personal data (in particular your IP address) and the processing of this data by deactivating the execution of script code in your browser, installing a script blocker in your browser (you can find this, for example at www.noscript.net or www.ghostery.com ) or activate the "Do Not Track" setting in your browser.

  • FACEBOOK CUSTOM AUDIENCE

    We use a web tracking service from Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland (hereinafter: Facebook Custom Audience) on our website. Facebook Custom Audience uses cookies as part of web tracking, which are stored on your computer and which enable an analysis of the use of our website and your surfing behavior (so-called tracking). We carry out this analysis on the basis of the tracking service from Facebook Custom Audience in order to continuously optimize our website and make it more available. When you use our website, data such as your IP address and your user activities are transmitted to the Facebook Custom Audience server and processed and stored outside the European Union, e.g. in the USA. The legal basis for data processing is Article 6 (1) (a) GDPR. Facebook Custom Audience has certified itself under the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transferred data can be found in the privacy policy of Facebook Custom Audience: https://www.facebook.com/about/privacy . You can prevent the collection and forwarding of personal data (in particular your IP address) and the processing of this data by deactivating the execution of script code in your browser, installing a script blocker in your browser (you can find this, for example at www.noscript.net or www.ghostery.com ) or activate the "Do Not Track" setting in your browser.

5. Integration of external web services and processing of data outside the EU

We use active JavaScript content from external providers, so-called web services, on our website. By calling up our website, these external providers may receive personal information about your visit to our website. Processing of data outside the EU may be possible. You can prevent this by installing a JavaScript blocker such as the browser plug-in 'NoScript' (www.noscript.net) or by deactivating JavaScript in your browser. This can lead to functional restrictions on the websites that you visit.
We use the following external web services:

  • GOOGLE

    A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google) is loaded onto our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google. The legal basis for data processing is Article 6 (1) (f) GDPR. The legitimate interest consists in the correct functioning of the website. Google has certified itself as part of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transferred data can be found in Google's data protection declaration: https://policies.google.com/privacy . You can prevent Google from collecting and processing your data by deactivating the execution of script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www.ghostery. com ).

  • GOOGLE APIS

    A web service from Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google APIs) is loaded onto our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google APIs. The legal basis for data processing is Article 6 (1) (f) GDPR. The legitimate interest consists in the correct functioning of the website. Google-Apis has certified itself as part of the EU-US Privacy Shield Agreement (see https://www.privacyshield.gov/list ). The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transferred data can be found in the Google Apis data protection declaration: https://policies.google.com/privacy . You can prevent the collection and processing of your data by Google APIs by deactivating the execution of script code in your browser or installing a script blocker in your browser (you can find this, for example, at www.noscript.net or www. ghostery.com ).

  • CLICK TIP

    A web service from KLICK-TIPP LIMITED, 15 Cambridge Court, W6 7NJ London, UK (hereinafter: klick-tipp) is loaded onto our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to klick-tipp. The legal basis for data processing is Article 6 (1) (f) GDPR. The legitimate interest consists in the correct functioning of the website. The data will be deleted as soon as the purpose for which it was collected has been fulfilled. You can prevent the collection and processing of your data with a click-tip by deactivating the execution of script code in your browser or installing a script blocker in your browser (you can find this, for example
    at www.noscript.net or www.ghostery.com ).

  • SOCIAL PLUG-IN - "FACEBOOK"
    • SCOPE OF PROCESSING OF PERSONAL DATA

      On our website we have integrated a social plug-in from the social network “Facebook”, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, 2 Dublin, Ireland (“Facebook”). When you call up a page that contains such a plug-in, your browser automatically establishes a background connection to the Facebook servers. The content of the plug-in is transmitted directly from Facebook to your browser and only integrated into our website. Through this integration, Facebook receives the information that your browser has loaded a specific page on our website. This also applies if you do not have a Facebook profile or are not currently logged into Facebook. This information (including your IP address) is sent directly from your browser to a Facebook server in Ireland and stored there. If you are logged in to Facebook, Facebook can immediately assign your visit to our website to your Facebook profile. If you interact with the plug-ins, for example press the "Like" button or leave a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook contacts that you have activated for this purpose.

    • LEGAL BASIS FOR PROCESSING PERSONAL DATA

      Article 6 (1) (a) GDPR (if you have registered with “Facebook”) and Article 6 (1) (f) GDPR (if you have not registered with Facebook). Insofar as the processing takes place on the basis of Article 6, Paragraph 1, Sentence 1, Letter f GDPR, the legitimate interest of the website operator is to enable users to interact with the website operator's content on Facebook.

    • PURPOSE OF THE DATA PROCESSING

      The primary purpose of data collection is to offer you a social interaction network linked to Facebook and thus to make our website interactive. The scope of the data collection and the further processing and use of the data you have left by Facebook as well as your related rights and setting options to protect your privacy can be found in Facebook's data protection information: ( https://www.facebook.com/about/privacy ) .

    • DURATION OF STORAGE

      Facebook will store the data relevant to the provision of the web service for as long as necessary. If the data are subject to statutory retention requirements, they will be deleted after the retention requirements have expired.

    • POSSIBILITY OF OBJECTION AND ELIMINATION

      If you do not want the Facebook social plug-in to be executed, you can block execution by installing a so-called script blocker such as "NoScript". If you do not want Facebook to assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also specifically prevent the loading of the Facebook plug-ins with add-ons for your browser. You can find the right plugins for Mozilla Firefox under the following search:
      https://addons.mozilla.org/de/firefox/
      You can find the right plugins for Opera under the following search:
      https://addons.opera.com/de/
      You can find the right plugins for Chrome under the following search:
      https://chrome.google.com/webstore/category/extensions?hl=de
      The options for objection and elimination are otherwise based on the general provisions on the right to object under data protection law and the right to cancellation described below in this data protection declaration.

6. Information about the use of cookies

  • SCOPE OF PROCESSING OF PERSONAL DATA

    We use cookies on various pages to enable the use of certain functions of our website. The so-called 'cookies' are small text files that your browser can store on your computer. These text files contain a characteristic string of characters that enable the browser to be clearly identified when you visit our website again. The process of storing a cookie file is also called 'setting a cookie'.

  • LEGAL BASIS FOR PROCESSING PERSONAL DATA

    Art. 6 Paragraph 1 lit.f GDPR (legitimate interest). Our legitimate interest lies in maintaining the full functionality of our website, increasing usability and enabling a more individualized customer approach. We are only able to identify individual site visitors with the help of cookie technology if the site visitor has given us the relevant personal data beforehand on the basis of a separate consent.

  • PURPOSE OF THE DATA PROCESSING

    The cookies are set by our website in order to maintain the full functionality of our website and to improve usability. In addition, cookie technology enables us to recognize individual visitors using pseudonyms, e.g. any individual ID, so that we are able to offer more individual services.

  • DURATION OF STORAGE

    Our cookies are stored until they are deleted in your browser or, if it is a session cookie, until the session has expired.

  • POSSIBILITY OF OBJECTION AND ELIMINATION

    You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on the acceptance of cookies on a case-by-case basis or accept the acceptance of cookies in principle. Cookies can be used for different purposes, e.g. to recognize that your PC has already had a connection to our website (permanent cookies) or to save recently viewed offers (session cookies). We use cookies to offer you increased user comfort. In order to use our convenience functions, we recommend that you allow cookies for our website. The options for objection and elimination are otherwise based on the general provisions on the right to object under data protection law and the right to cancellation described below in this data protection declaration.

7. Data security and data protection, communication by email

Your personal data are protected by technical and organizational measures during collection, storage and processing so that they are not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the post for information with a high level of confidentiality.

8. Revocation of consent - data information and change requests - deletion and blocking of data

You have the right to free information about your stored data at appropriate intervals as well as the right to correct, block or delete your data at any time. Your data will be deleted by us upon first request, unless there are legal regulations to the contrary. You can revoke permission given to us to use your personal data at any time. You can send requests for information, deletion and correction of your data, as well as suggestions, to the following address at any time:

Sarah Schreiner

Carrer Costa i Llobera 32 Correos  

P.Box 84

07200 Felanitx Mallorca

Email: info@xxlluxorbullys.com

Tel .: +49 176 76551796

9. Right to data portability

You have the right that we provide you with the personal data that you have transmitted to us in a structured, common and machine-readable format. You can also request that we transmit this data to a third party immediately on your first instruction, provided that the processing is based on consent in accordance with Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract in accordance with Art. 6 Para. 1 lit.b GDPR and the processing by us takes place within the framework of automated data processing.
When exercising this right of data portability, you also have the right to have the personal data relating to you transmitted directly to another person responsible, insofar as this is technically feasible. This must not impair the freedoms and rights of other people.
The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task that is in the public interest or takes place in the exercise of official authority that has been transferred to the person responsible.

10. Right to lodge a complaint with the supervisory authority in accordance with Article 77 (1) GDPR

If you suspect that your data is being processed unlawfully on our site, you can of course bring about a judicial clarification of the problem at any time. Regardless of this, you have the option of contacting a supervisory authority. You have the right to lodge a complaint in the EU member state of your place of residence, your place of work and / or the place of the alleged infringement, ie you can choose the supervisory authority to which you apply at the above-mentioned locations. The supervisory authority to which the complaint was submitted will then inform you of the status and results of your entry, including the possibility of a judicial remedy according to Art. 78 GDPR.

bottom of page