1.1 What is personal data
Personal data is information that discloses or can disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.
1.2 Handling of personal data
Personal data is used exclusively for the purpose of establishing the contract, defining its content, implementing or processing the contractual relationship (Art. 6 (1 b) GDPR).
Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 (1 a) GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 (1 f) GDRP).
We may use order processors to process your personal data but will not pass on the personal data to third parties beyond this as a matter of principle.
Only for the fulfillment of the contract, the data will be passed on to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. For the processing of payments, the payment data required for this will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.
The processing of your personal data takes place exclusively within the EU unless otherwise stated below.
1.3 Usage data
When visiting the website, general technical information is collected. This is the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. This usage data is registered in a log file for technical reasons and can be used and stored for the purpose of statistical evaluation of this website. A linkage of these usage data with your further personal data does not take place.
1.4 Registration data
Registration is required for the comprehensive use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 (1 a) GDPR).
1.5 Duration of storage
We store your personal data after the termination of the purpose for which the data was collected only as long as this is required by law (especially tax law).
You can request information from us as to whether we are processing personal data about you. If so, you have a right to information about this personal data and the further information specified in Article 15 of the GDPR.
2.2 Right to rectification
You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 DSGVO.
2.3 Right to erasure
You have the right to demand that we delete the personal data concerning you without undue delay. We are obliged to delete them without delay, in particular, if one of the following reasons applies:
- Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
- You revoke your consent on which the processing of your data was based, and there is no other legal basis for the processing.
- Your data has been processed unlawfully.
The right to erasure does not exist insofar as your personal data is required for the assertion, exercise or defense of our legal claims.
2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if
- you dispute the accuracy of the data, and we, therefore, verify the accuracy,
- the processing is unlawful, and you refuse the deletion and demand the restriction of use instead,
- we no longer need the data, but you need it to assert, exercise or defend legal claims,
- you have objected to the processing of your data, and it has not yet been determined whether our legitimate reasons outweigh your reasons.
2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format, and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.
2.6 Right of withdrawal
Insofar as the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General and right of appeal
The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the State Data Protection Officer, directly.
3.1 Data security
All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and distribution.
3.2 Sessions and cookies
Below you will find the domain, name and duration of cookies used only based on your consent:
If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis based on your consent according to Art. 6 (1 a) GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options provided in the legal notice or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.
Insofar as you use the comment function on our website, the time of creation, your chosen pseudonym and temporarily also your IP address will be stored in addition to these comments. This is done so that we can protect our rights in the event of illegal content.
We use the following social media platforms for company presentation and communication (explicit reference is made to the privacy statements and opt-out options linked below).
Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
Opt-Out: https://www.facebook.com/settings?tab=ads alternatively http://www.youronlinechoices.com
Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA).
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland).
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
These social media platforms may process personal data outside the EU; we refer in this respect to the above privacy statements of the social media platforms.
The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored independently of the device. Your usage profile can be used, for example, to place advertisements that presumably correspond to your interests.
We process the personal data exclusively for communicating with you via the social media platform you have chosen and for optimizing our online presence and ensure that no interests on your part are affected here that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 (1 a) GDPR).
7.1 Google Analytics
In addition, you can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set, which will prevent the collection of your data during future visits to this website:
We would like to point out that on this website, Google Analytics has been extended by the code "anonymizeIp" to ensure an anonymized collection of IP addresses (so-called IP masking).
7.2 Social media links and social sharing
We have our own social media pages with third-party providers that can be reached via links from this website. By using the links, you can access the respective websites of the third-party providers (e.g., Facebook, Twitter, Instagram) and also share our content. Here, no data transfer takes place by calling up our website. To avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.
7.3 Use of Google ReCAPTCHA
This website uses the reCAPTCHA service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The function is used to distinguish whether the input is made by a human or improperly by automated machine processing. The query includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of reCaptcha is not merged with other data from Google. Google reCAPTCHA is only used based on your express consent (Art. 6 (1 a) GDPR).
A web service of the company CloudFlare Inc, 101 Townsend St, 94107 San Francisco (hereinafter: CloudFlare) is reloaded on our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to CloudFlare. The legal basis for the data processing is Art. 6 (1 f) GDPR. The legitimate interest consists in an error-free function of the website. The data is deleted as soon as the purpose of its collection has been fulfilled.
You can prevent the collection as well as the processing of your data by CloudFlare by deactivating the execution of script code in your browser or by installing a script blocker in your browser (this can be found, for example, at www.noscript.net or www.ghostery.com ).
7.5 Use of Google DoubleClick
We use Google's online marketing tool DoubleClick on this website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This feature allows us to target visitors to this website as customers with advertising and to analyze your use of our website. It is thus transmitted to the Google server which of our web pages the customer has visited. For more information on the collection and use of data by Google, your rights in this regard and ways to protect your privacy, please refer to the privacy notices regarding advertisements by Google at http://www.google.com/policies/technologies/ads/.
Users can disable the DoubleClick cookies by visiting the following websites: https://www.google.de/settings/ads/anonymous?sig=ACi0TCgs7SqFp3lN7Bx8arrH0dIHs2SLA-5DJ1SGFoHgFPlezJZBsR32IdFw0zp7mcu1lpuiEO0jUwYVPXnyo857jkrVHpCum96q2lWm1ZUt3Lb68im0l84&hl=de#display_optout or http://www.networkadvertising.org/choices/.
The legal basis for the processing is the consent given by you according to Art. 6 (1 a) GDPR.
7.6 Use of YouTube
We have contracted the payment service provider Stripe (Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland) to handle our payment process. For this purpose Stripe will pass on the information provided to us during the booking process together with the information about your booking (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1 b) GDPR. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. Further information about the data protection of Stripe can be found under the URL https://stripe.com/de/privacy#translation.
7.8 Use of Hubspot
7.9 Use of Facebook Pixels
If you do not want Facebook to assign the collected information directly to your Facebook user account, you can disable the function in your account settings at: https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fsettings%2F%3Ftab%3Dads#_=_bearbeiten. To do this, you must be logged in to Facebook.
To contact us regarding data protection, you are welcome to use the following contact options. The person responsible in the sense of the DSGVO:
Beazy UG (haftungsbeschränkt)
c/o Factory Works GmbH Rheinsberger Str. 76/77