Privacy Policy
We protect your data. In principle, it is not necessary to provide personal data to use our websites. If processing personal data is necessary in order to use a service or offer, we will always obtain the consent of the relevant person. We observe the General Data Protection Regulation (GDPR/GDPR), which came into force on May 25, 2018. Of course, we also observe the other regulations (e.g. BDSG) for the processing of personal data. This data protection declaration provides information about the type, scope and purpose of the personal data we collect, use and process. This data protection declaration also serves to inform you about your rights. With our measures we offer the best possible protection for your personal data and its processing. Due to possible gaps in data transmission technology, absolute protection cannot be guaranteed. If in doubt, you should therefore send your personal data to us by telephone or another method.
As a responsible company, we refrain from automated decision-making or profiling of visitors to our website and our customers.
1. Definitions
This data protection declaration uses terms specified by the General Data Protection Regulation (GDPR). To make this data protection declaration easier to understand, the most important terms are explained using the wording of the regulation text. For the purposes of the regulation, the expression means:
a) personal data
“personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); A natural person is considered identifiable if he or she can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person;
b) affected person
“data subject” means any identified or identifiable natural person whose personal data are processed by the data controller.
c) Processing
“Processing” means any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organization, structuring, storage, adaptation or modification, reading, querying, etcUsage,
disclosure by transmission, distribution or other form of provision, alignment or association, restriction, deletion or destruction;
d) Restriction of processing
“restriction of processing” means the marking of stored personal data with the aim of restricting their future processing;
e) Profiling
“Profiling” means any type of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements of that natural person;
f) Pseudonymization
“Pseudonymization” means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person;
g) Controller or controller
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, decides on the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
h) Processor
“processor” means a natural or legal person, public authority, institution or other body that processes personal data on behalf of the controller;
i) Receiver
“Recipient” means a natural or legal person, public authority, agency or other body to which personal data is disclosed, whether or not it is a third party. 2 However, public authorities which may receive personal data in the context of a specific investigative task under Union or Member State law shall not be deemed to be recipients; the processing of these data by the said authorities will be carried out in accordance with the applicable data protection rules in accordance with the purposes of the processing;
j)Third
“Third party” means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor;
k) Consent
“consent” of the data subject means any voluntary, specific, informed and unambiguous expression of the wishes of the data subject in the form of a statement or other unequivocal affirmative action by which the data subject indicates that he or she agrees to the processing of personal data concerning him or her;
2. Name and address of the data controller
The person responsible within the meaning of the General Data Protection Regulation and other data protection regulations is:
Jackelien Winkler, Hafenstraße 3, 41460 Neuss, accounting@extraliebe.de
3. Name and address of the data protection officer
The data protection officer of the data controller is:
Any affected person can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
4. Cookies
Cookies are files that serve as identifiers. We transfer these to your computer's hard drive using your web browser and can read the cookies during each visit to our websites. With these so-called permanent cookies, we use a pseudonym to protect your data. Cookies contain a cookie ID. This is a unique identifier for the cookie. This allows us to assign Internet pages and servers to the Internet browser. Our short-term cookies are not specially encrypted by us. However, these are protected against being read by third parties by the security standard of your browser. Through the use of cookies, your browser is recognized. This enables us to tailor our offer to your preferences. Please refer to your web browser's Help function for instructions on how to instruct your browser to display new cookies, not accept a new cookie, or to disable all cookies received. You can also object to the creation of your user profile using cookies at any time.
5. General data and information collection
Every time one of our websites is accessed, we collect general data and information through an automatic system, which is stored in log files on the server. The recording primarily concerns the type of browser used, its versions, the operating system on which the browser is operated, the
last website from which the visitorhas reached our website (referrer), among websites that are referred to our website via another system, the date and time of access to the respective website, the Internet protocol address (IP address), the identifier of the Internet service provider and other data and information that serves security purposes. We do not use this data to draw conclusions about the person concerned. This data is only collected with the aim of presenting our website in an optimized manner and to further improve our systems as well as to provide this data to law enforcement authorities if we fall victim to a hacker attack. In this respect, we use your data to support system administration, to create statistics and, if necessary, to comply with our legal obligations. Log file data is always stored separately from other personal data.
6. Registration, newsletter
If you have the option to register on our website to use our services and obtain information (e.g. newsletter), the personal data entered will be transmitted to the person responsible for processing. When registering, the Internet protocol address and the date and time are also saved. This personal data is collected, stored and used exclusively to fulfill these services or to provide the requested information and only internally. If necessary, the controller will only pass on personal data to processors for these exclusive purposes. The personal data collected during registration will be deleted from the data controller's inventory upon request by the data subject. The data subject must request information about the personal data stored about them at any time by making a corresponding request.
7. Tracking pixel
Our websites and newsletters may contain tracking pixels. These are small embedded graphics that we use to record and then analyze a log file. If you open a page or the newsletter, the tracking pixel is loaded from a server on the Internet and registered with us with the IP address you used and, if necessary, also with your cookie ID (see Cookies). This allows us to track exactly which pages you have visited and what actions you have taken there. We may use the information obtained about you to present you with targeted Internet advertising on our advertising websites or to optimize and personalize content in our newsletters. This data will not be passed on. If you don't want an automated personalized evaluation, you canobject at any time. To do this, send us an email to “accounting@extraliebe.de”. In this case, cookies will continue to be set, but only to exclude you from the evaluation. Your personal data will then no longer be evaluated by us.
8. Contact via the website
Our website contains relevant information on how to contact our company. If a data subject contacts us by email or via our contact form, personal data
saved. The data is stored solely for the purpose of contacting the person concerned. This personal data will not be passed on to third parties.
9. Deletion and blocking of personal data
Personal data will be regularly blocked and/or deleted in accordance with the data protection laws and regulations to which the person responsible is subject after the storage purpose no longer applies and, if necessary, after the expiry of a storage period prescribed by law.
10. Rights of the data subject
A data subject has the right to request confirmation from the controller as to whether he is processing personal data relating to the person.
A data subject has the right to receive information (as a copy) from the person responsible free of charge about the personal data stored about the data subject. The following information is communicated in this regard: processing purposes, categories of data, recipients or categories of recipients, if possible, the planned duration of storage of the personal data or criteria for determining this duration, the existence of a right to rectification or deletion of the personal data or to restriction of processing by the controller or a right to object to the processing, the existence of a complaint court before a supervisory authority, information about the origin of the data, the existence of automated decision-making including profiling and information about the transmission of the data personal data to a third country or to an international organization. The information also contains all other information required by the General Data Protection Regulation.
A data subject has the right to rectification of their stored personal data.
A data subject has the right to have their stored personal data deleted (right to be forgotten).
A data subject has the right to restrict the processing of their personal data.
A data subject has the right to data portability of their personal data, which the data subject provides to the controllerwere provided. Specifically, this means that the person responsible must be provided with the personal data in a structured, common and machine-readable format to the data subject. The data subject also has the right to have the person responsible provide the personal data to another person responsible. However, this only applies if the further requirements of the GDPR are met.
A data subject has the right to object to the processing of personal data concerning them as well as profiling based on this under the conditions of the GDPR with the corresponding legal consequences.
A data subject has the right to withdraw their consent to the processing of personal data.
With regard to all rights, the data subject may contact an employee of the controller.
11. Use of Google Analytics (with anonymization function)
The controller uses the addition “_gat._anonymizeIp” for web analysis via Google Analytics. By means of this addition, the IP address of the data subject's internet connection is shortened and anonymized by Google if our website is accessed from a member state of the European Union or from another contracting state to the Agreement on the European Economic Area.
The purpose of the Google analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.
Google Analytics sets a cookie on the information technology system of the data subject. What cookies are has already been explained above. By setting the cookie Google an analysis of the use of our website is made possible. Each time you access one of the individual pages of this website, which is operated by the controller and on which a Google analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google obtains knowledge of personal data, such as the IP address of the data subject, which Google serves, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlements.
Using the cookiePersonal information, such as the access time, the location from which access was made and the frequency of visits to our website by the data subject, is stored. Each time you visit our website, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may pass on the personal data collected via the technical process to third parties.
The person concerned can prevent the setting of cookies through our website, as already described above, at any time by means of a corresponding setting on the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the information technology system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
The data subject also has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website as well as the processing of this data by Google. To do this, the data subject must download and install a browser add-on using the link https://tools.google.com/dlpage/gaoptout. This browser add-on tells Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered a contradiction by Google. If the data subject's information technology system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.
Further information and the applicable privacy policy of Google can be found at https://www.google.de/intl/de/policies/privacy/ and at http://www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at this link https://www.google.com/intl/de_de/analytics/.
12. Legitimate interests in processing pursued by the controller or a third party
The processing of personal data can be carried out in the legitimate interest of carrying out our business activities for the benefit of our employeesand our shareholders, Art. 6 Para. 1 lit. f GDPR.
13. Legal and contractual regulations for the provision of personal data
Finally, we declare that personal data must be stored in part due to laws or in the event that there are contractual obligations to do so. Personal data must be collected and stored, especially in the event of a contract being concluded. For further information about his or her rights, the data subject must contact one of our employees before providing personal data.