I. General information and legal basis
The following declaration informs you about what kind of personal data is collected for what purpose by us as the responsible party and to what extent this data is made available to third parties.
1. Responsible body
edelsprint UG (haftungsbeschränkt)
Technologiepark 8, 33100 Paderborn
Telefonnummer: 05251 60 2391
2. Legal basis of the processing
The processing of personal data requires a legal basis, which we would like to present to you in the following.
When processing personal data for which we obtain the consent of the data subject, Article 6 paragraph 1 letter a of the EU Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6 paragraph 1 lit. b GDPR serves as the legal basis. This also includes processing operations which are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 letter f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimization and maintenance of the security of our online offer.
II. Log files, hosting
We take up hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services to maintain the operation of this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer based on our legitimate interests in an efficient and secure provision of this online offer.
III. Contractual processing
The personal data provided by you for contractual purposes, e.g. for quotation requests, such as name, address or e-mail address, will only be used internally to answer your inquiries, process your orders or provide you with access to certain contractual information.
When you contact us by e-mail or via chat, your details will be stored by us to answer your questions. As a matter of principle, we do not pass on your data to third parties, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your given consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to exist and there are no other conflicting legal exceptions.
The consent is voluntary and you can also use our services without accepting cookies. You can also configure your browser settings according to your wishes and, for example, reject the acceptance of third party cookies or all cookies or delete already stored cookies. If you do not accept cookies, please note that in this case our services may not function correctly. Unless we provide other information on the individual topics mentioned in this data protection declaration, the lifetime of the cookies refers to 24 months. To find out which function sets cookies on our website, please refer to the individual functions below.
If you would like to receive the newsletter offered on our website, we require a valid e-mail address from you, which allows us to verify that you are the owner of the e-mail address provided or that the owner of the e-mail address agrees to receive the newsletter. After providing the e-mail address, we will send you a confirmation e-mail to the specified address in which we ask you to confirm that you wish to receive the newsletter. If you confirm your wish to receive the newsletter, we will save your e-mail address until you unsubscribe. We only send newsletters with your consent or a legal permission.
Our website offers a registration option. The personal data entered during the registration process is transferred to the data controller. The data will be stored exclusively for the purpose of internal use by us. During registration, the IP address of the user as well as the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception is made if there is a legal obligation to pass on data. The registration of the data is necessary for the provision of content or services. Registered persons have the possibility to delete or change the stored data at any time. The person concerned will receive information about the personal data stored about him/her at any time.
VIII. Our presence in social media
You can find us under Online Presences within social networks and platforms. With these presences we would like to communicate with our customers, interested parties and users and inform them about our services and our company. The personal data of the users active there is processed on the basis of our legitimate interest in communication and the provision of information to and with the users. If the users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on this basis of consent.
If you visit one of our social media sites, we are responsible, together with the operator of the social platform, for the data processing operations triggered during this visit. You can basically assert your rights (information, correction, deletion, restriction of processing, data transferability and complaint, see the following point “Rights of the data subject”) both against us and against the operator of the respective social platform. We would like to point out that, despite the joint responsibility, we do not have full influence on the data processing procedures of the social platform and, if necessary, for a better processing of the data subject’s rights, we forward the rights request to the respective operator. Our possibilities are basically based on the corporate policy of the respective provider.
Depending on the following named social platform, the data processing of users may also take place outside the area of the European Union. EU standard contract clauses have been agreed with the US companies, so that we have taken possible measures to ensure European data protection law.
User data is usually processed by the platforms for market research and advertising purposes. For example, user profiles can be created from the user behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Data can also be stored in the user profiles independently of the devices used by the users. This is particularly the case if the users are members of the respective platforms and are logged in to them.
For a detailed presentation of the respective processing and the possibilities of objection, we refer to the following linked information of the providers.
Facebook (pages, groups)
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland);pPrivacypPolicy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
IX. Transfer of data to third parties: General and contractual purpose
We pass on data to third parties if this is necessary for the fulfilment of the contract and/or if we are legally obliged and/or entitled to do so in individual cases.
1. Payment service: Stripe
We use Stripe, an offer of the American Stripe Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, USA (hereinafter “Stripe”) to process payments via our website. In particular, Stripe has published the following information on the type, scope and purpose of data processing in its data protection declaration: https://stripe.com/de/privacy#translation. Via Stripe it is possible to offer different payment methods, such as credit card payments or direct debit. In this context Stripe offers software interfaces to integrate these payment methods with us. The crediting of a payment transaction is then carried out for us via a so-called Stripe account.
If you make a payment via our platform, the data of the person concerned is automatically transferred to Stripe. By selecting this payment option, the person concerned agrees to the transfer of personal data required for the payment process.
The personal data transmitted to Stripe is usually first name, surname, address, e-mail address, IP address, telephone number, cell phone number or other data, as well as financial transaction data, such as credit card number or account data, which is necessary for processing the payment. Personal data that is necessary for the processing of the contract is also that which is related to the respective service.
The transmission of the data is intended for payment processing and fraud prevention. The personal data exchanged between Stripe and us may be transferred by Stripe to credit agencies. The purpose of this transmission is to check identity and creditworthiness within the scope of our legitimate interest.
Stripe may pass on the personal data to affiliated companies and service providers or subcontractors, if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of an order.
X. Transfer of data to third parties: tools for the economic operation of the website
In some cases we make use of external service providers within the scope of your consent or our legitimate interests with regard to analysis, optimization and economic operation of the online offer. This basically presupposes that the third party providers of this content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore necessary for the display of this content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information similar to log files. In the following we list our service providers.
If your data is to be used for other purposes, we will inform you in advance and will only use the data if you have given your express permission to do so.
1. Service provider Google
We use, within the scope of our agreement with you, services for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is responsible for the analysis, optimization and economic operation of our online offer. EU standard contract clauses have been agreed with Google, so that we have taken possible measures to ensure compliance with European data protection law.
a. Google Analytics
This website uses Google Analytics as a web analysis service. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there.
The data collection and storage by Google for the respective end device can be contradicted at any time with effect for the future in connection with the use under this link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the collection by Google Analytics by clicking the following button:
b. Google AdWords and Conversion Tracking
d. Google Fonts
Within the scope of our legitimate interests in the analysis, optimization and economic operation of our online offer, we use services of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
a. Facebook Custom Audiences and Website Custom Audiences
Our website uses the advertising tools Custom Audiences and Website Custom Audiences from Facebook. Here, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Facebook for analysis and marketing purposes on its social platform and stored in the USA. The Facebook pixel is directly integrated by Facebook when you call up our websites and can store a so-called cookie, i.e. a small file on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes. If we send data to Facebook for comparison purposes, it is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing the data with the data similarly encrypted by Facebook.
For more information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to the Facebook data protection information at http://www.facebook.com/about/privacy/, and specifically for Facebook Custom Audiences at https://www.facebook.com/ads/website_custom_audiences/. If you wish to object to the use of Facebook Website Custom Audiences, you can also do so at https://www.facebook.com/ads/website_custom_audiences/. To do so, you must log in to your Facebook account.
To prevent the collection of your data using the Facebook pixel on our website, please click the following button:
3. Font Awesome
If you do not want HubSpot to collect cookies, you may at any time modify the consent given by the cookie banner or prevent their use by changing your browser settings accordingly.
Segment also allows the central consolidation of data from several tools (e.g. software and Google Analytics). The goal is to collect and standardize data and make it available in the relevant areas with a single API.
7. Sentry for error logging
8. Slack for analysis of system notifications about changes
We use the Slack tool from Slack Technologies Limited, Dublin, Ireland, to analyze system notifications about changes in our software. The following data is processed: User data, hub names.
9. Heap analytics
We use the analysis service of Heap Analytics Inc, 116 Natoma Street 3rd Floor, San Francisco, CA 94105. EU standard contract clauses have been agreed with Heap Analytics, so that we have taken possible measures to ensure compliance with European data protection law. Heap Analytics logs page views and page activity. The information generated by the cookies about your use of our services is usually transferred to a Heap Analytics server in the USA and stored there. Pseudonymous user profiles of the users can be created from the processed data. The abbreviated IP address transmitted by your browser in the context of Heap Analytics is not merged with other data from Heap Analytics. You can find more information about the data protection regulations of Heap Analytics under <www.heapanalytics.com/privacy>. Heap Analytics offers every user there the possibility to prevent the use of the tool by means of a “Do Not Track Header”, so that no data about the visit of the respective services is recorded.
To integrate different databases and tools we use Zapier, a service of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA. Customer data can be transmitted with the exception of payment data. EU standard contract clauses were agreed upon with Sentry, so that we were able to take possible measures to ensure European data protection law. Further information on data protection at Zapier can be found at https://zapier.com/privacy.
Within our online offer the so-called “Perspective Funnels”, which are operated by Perspective Digital GmbH and Perspective Software GmbH, Müggelstraße 22, 10247 Berlin, are used. With the help of the Perspective Funnels, interested parties are informed about our range of services and can contact us by phone or e-mail.
XI. Rights of the data subject
You have a right to information about the personal data we have stored about you. According to the legal regulations you also have the right to correct incorrect data, block, transfer and delete your personal data. To do so, please send us an e-mail with the subject “Data protection”. You also have a right to complain to a data protection supervisory authority if you believe that processing of your personal data violates the legal provisions.
If you have given your consent, you have the right to revoke it at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against processing for the purposes of direct advertising.
XII. Storage period of personal data
If we have not provided storage instructions for the specific points, the following applies: We store personal data for the duration of the respective legal retention period or as long as the purpose of the collection exists. After the retention period has expired, the data is routinely deleted, unless it is necessary for the initiation or fulfillment of a contract. If the users’ data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data will be blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
XIII. Safety information
We make every effort to process your personal data by taking all technical and organisational measures to ensure that the regulations of the data protection laws are observed and to protect these data. Our website or communication with us via our website is encrypted using HTTPS.