Privacy

Privacy Policy

In this privacy policy we inform you about the processing of your personal data.

If you want to change your privacy settings (grant consent or revoke your previously granted consent), click here to change your settings.

Responsible

Stefan Abels, Flat.Tips – Stefan Abels, Pillauer Straße 15, 26389 Wilhelmshaven, DE, info@flat.tips, +49 (0) 4421 – 9187920

Responsible for privacy issues

You can reach our contact for data protection matters at:

Harlander Rechtsanwalt GmbH, attn. Rechtsanwalt Mag. Peter Harlander,
Fürbergstraße 42a
Salzburg 5020
Phone: +43 662 623323
Email: office@marketingrecht.eu

Hosting

1&1 IONOS SE

Our website is hosted by our processor 1&1 IONOS, 1&1 IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR.

Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.

Server Log Files

Connection data are processed to monitor the technical function and to increase the reliability of our webhost. The duration of processing is limited to 56 days.

The legal basis of processing is the legitimate interest (absolute technical necessity of a server log file as fundamental data basis for failure analysis and for security measures in connection with the “website” service which you have explicitly requested by visiting the website) according to Art. 6 (1) (f) GDPR.

CDN Provider

Cloudflare CDN

Parts of our website are hosted by our processor Cloudflare, Cloudflare Germany GmbH, Rosental 7, 80331 München, Deutschland.

Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website. However, our processor keeps connection data for security purposes. The duration of processing for security purposes varies and ends with the necessity of the security measures. Furthermore, our processor anonymizes collected data immediately after such data were collected and provides us with statistics for analysis containing anonymous data. We use these statistics for debugging and the sophistication of our website.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR.

Contact Form

You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.
You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.

Registration Form

You can register on our website. After you have registered, we will process the data provided in the registration form for the performance of the contract based on the contract concluded with us with your registration according to Art. 6 (1) (b) GDPR.

You have no legal or contractual obligation to provide personal data. You simply cannot register for the service if you do not provide such data.

Data are not transferred to third parties.

Comments Form

By commenting our products, postings, photographs or videos we will process your personal data for the purpose of imaging your comments on our website and internal documentation of the legal basis of the contract concluded according to Art. 6 (1) (b) GDPR (gratuitous hosting contract to image your commentation on our website). We will publish your name and comment on our website and store your personal data until deletion of your comment.

Security Services

On this website we use the offer of security service providers such as Captcha services to avoid non-human and automated input.

Google reCAPTCHA

If you give your consent, we will process your personal data in cooperation with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of avoidance of non human and automatized inputs. We will enable the service to set third party cookies, to collect connection data and data of your web browser. Furthermore we enable the service to build a personal user-ID to conclusively identify the user within the scope of the advertising network operated by Youtube / Google. The data will be stored on your device for up to two years.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. A failure to give consent will have the effect of not being able to use reCaptcha or the connected forms.

You can revoke your consent by changing the settings at Privacy settings.

Web Fonts

Google Fonts

We process connection data and browser data in cooperation with our processor Google Fonts, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in order to provide the fonts which the web browser needs to display the website. These data are processed only for the time needed to select and transfer the fonts.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR.

Any further independent processing of data by Google Fonts is carried out by Google as sole controller. Detailed information is provided in the Data privacy policy and in the FAQ of Google Fonts.

Embeddings

OpenStreetMap

If you have given your consent, we will process your personal data in cooperation with Open Street Map, OpenStreetMap Foundation, St Johns Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom as joint controllers for the purpose of showing interactive maps on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Open Street Map to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Open Street Map.

Any further independent processing of data by Open Street Map is carried out by Open Street Map as sole controller. Detailed information is provided in the Data privacy policy of Open Street Map.

If you do not give your consent, we are simple not able to provide the Open Street Map service to you. If you do not give your consent, we are simply not able to provide the Youtube service to you. You can withdraw your consent by changing the settings at Privacy policy.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.

YouTube

If you have given your consent, we will process your personal data in cooperation with Youtube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as joint controllers for the purpose of playing videos on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Google to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Google.

Any further independent processing of data, especially via the Google advertising network, is carried out by Google as sole controller. Detailed information is provided in the Data privacy policy of Google.

If you do not give your consent, we are simply not able to provide the Youtube service to you. You can withdraw your consent by changing the settings at Privacy policy.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR.

Vimeo

If you have given your consent, we will process your personal data in cooperation with Vimeo, Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA as joint controllers for the purpose of playing videos on our website.

We will enable the service to collect connection data, data of your web browser, and to place an advertising cookie. The placing of advertising cookies allows Vimeo to create an individual user-ID for each user. These personal data can be used for unambiguous identification and are then processed via the advertising network operated by Vimeo.

Any further independent processing of data, especially via the Vimeo advertising network, is carried out by Vimeo as sole controller. Detailed information is provided in the Data privacy policy of Vimeo.

If you do not give your consent, we are simply not able to provide the Vimeo service to you. You can withdraw your consent by changing the settings at Privacy policy.

The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. The legal basis for the transfer of data to the US is the Commission implementing decision C/2016/4176 as well as the privacy shield certification.

Web Shop

You can buy products directly via our webshop. If you do so, the data you provide and the data of the products you have selected will be processed by the controller in order to provide you with an offer, for the conclusion of the contract, for the performance of the contract and for the fulfillment of post-contractual obligations prior to the conclusion of the contract based on the pre-contractual relationship initiated by you and, after conclusion of the contract, based on the contract according to Art. 6 (1) (b) GDPR.

If you use an already existing customer account to buy our products or have created a customer account to buy the products, your personal data will be processed until you delete your customer account.

When customers buy our products via a guest checkout, their personal data will be processed until the legal retention periods have expired.

Your data are processed for the purpose of direct marketing in a manner compatible with the purpose of performing the contract in forms not requiring consent, such as addressed advertising materials sent by post, until you object.

You have no legal or contractual obligation to provide personal data. However, the provision of data is necessary for the conclusion of the contract. If you do not provide such data, a contract cannot be concluded.

Shopping carts of non-registered users will be deleted after 14 days, at the latest. User accounts of registered users are active until the account is deleted by the user. Contract data are processed until the limitation period of potential post-contractual obligations has expired.

Payments are processed via:

Service:Apple Pay
Provider:Apple Inc., Apple Distribution International,Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
Data privacy policy: https://www.apple.com/legal/privacy/de-ww/

Service: Google Pay
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Data privacy policy:https://policies.google.com/privacy?gl=AT&hl=de#intro

Service: PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxenburg
Data privacy policy:https://www.paypal.com/at/webapps/mpp/ua/privacy-full?locale.x=de_AT

Service: Stripe
Provider: Stripe,Inc. 185 Berry Street, Suite 550, San Francisco, CA 94107, USA
Data privacy policy:https://stripe.com/at/privacy#contact-us
Privacy Shield:https://www.privacyshield.gov/participant?id=a2zt0000000TQOUAA4&status=Active

Analysis Services

Matomo

We use the local analysis software Matomo, InnoCraft Ltd., 150 Willis St, 6011 Wellington, NewZeeland to process your data for the purpose of troubleshooting, failure analysis and statistical analysis and to identify measures for the sophistication of our website.

This service is a local analysis tool so that no personal data are transferred to the service provider or to third parties. Furthermore, your personal data are anonymized immediately after such data were collected. Personal data are therefore stored beyond initial processing.

The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR.

Right to object

You have the right to object to processing if your personal data are processed based on legitimate interests.

We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so.

You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Withdrawal

You have the right to withdraw your consent at any time by changing the settings at Privacy settings.

If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to data subject

You have the right to access to, rectification, erasure and restriction of processing of personal data.

You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you.

You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, go to hier.

Newsletter

Mit den nachfolgenden Hinweisen informieren wir Sie über die Inhalte unseres Newsletters sowie das Anmelde-, Versand- und das statistische Auswertungsverfahren sowie Ihre Widerspruchsrechte auf. Indem Sie unseren Newsletter abonnieren, erklären Sie sich mit dem Empfang und den beschriebenen Verfahren einverstanden.

Inhalt des Newsletters: Wir versenden Newsletter, E-Mails und weitere elektronische Benachrichtigungen mit werblichen Informationen (nachfolgend „Newsletter“) nur mit der Einwilligung der Empfänger oder einer gesetzlichen Erlaubnis. Sofern im Rahmen einer Anmeldung zum Newsletter dessen Inhalte konkret umschrieben werden, sind sie für die Einwilligung der Nutzer maßgeblich. Im Übrigen enthalten unsere Newsletter Informationen zu unseren Produkten, Angeboten, Aktionen und unserem Unternehmen.

Double-Opt-In und Protokollierung: Die Anmeldung zu unserem Newsletter erfolgt in einem sog. Double-Opt-In-Verfahren. D.h. Sie erhalten nach der Anmeldung eine E-Mail, in der Sie um die Bestätigung Ihrer Anmeldung gebeten werden. Diese Bestätigung ist notwendig, damit sich niemand mit fremden E-Mailadressen anmelden kann. Die Anmeldungen zum Newsletter werden protokolliert, um den Anmeldeprozess entsprechend den rechtlichen Anforderungen nachweisen zu können. Hierzu gehört die Speicherung des Anmelde- und des Bestätigungszeitpunkts, als auch der IP-Adresse.

Anmeldedaten: Um sich für den Newsletter anzumelden, reicht es aus, wenn Sie Ihre E-Mailadresse angeben. Optional bitten wir Sie einen Namen, zwecks persönlicher Ansprache im Newsletters anzugeben.

Erfolgsmessung – Die Newsletter enthalten einen sog. „web-beacon“, d.h. eine pixelgroße Datei, die beim Öffnen des Newsletters von unserem Server abgerufen wird. Im Rahmen dieses Abrufs werden zunächst technische Informationen, wie Informationen zum Browser und Ihrem System, als auch Ihre IP-Adresse und Zeitpunkt des Abrufs erhoben. Diese Informationen werden zur technischen Verbesserung der Services anhand der technischen Daten oder der Zielgruppen und ihres Leseverhaltens anhand derer Abruforte (die mit Hilfe der IP-Adresse bestimmbar sind) oder der Zugriffszeiten genutzt. Zu den statistischen Erhebungen gehört ebenfalls die Feststellung, ob die Newsletter geöffnet werden, wann sie geöffnet werden und welche Links geklickt werden. Diese Informationen können aus technischen Gründen zwar den einzelnen Newsletterempfängern zugeordnet werden. Es ist jedoch weder unser Bestreben, noch, sofern eingesetzt, das des Versanddienstleisters, einzelne Nutzer zu beobachten. Die Auswertungen dienen uns viel mehr dazu, die Lesegewohnheiten unserer Nutzer zu erkennen und unsere Inhalte auf sie anzupassen oder unterschiedliche Inhalte entsprechend den Interessen unserer Nutzer zu versenden.

Deutschland: Der Versand des Newsletters und die Erfolgsmessung erfolgen auf Grundlage einer Einwilligung der Empfänger gem. Art. 6 Abs. 1 lit. a, Art. 7 DSGVO i.V.m § 7 Abs. 2 Nr. 3 UWG bzw. auf Grundlage der gesetzlichen Erlaubnis gem. § 7 Abs. 3 UWG.

Österreich: Der Versand des Newsletters und die Erfolgsmessung erfolgen auf Grundlage einer Einwilligung der Empfänger gem. Art. 6 Abs. 1 lit. a, Art. 7 DSGVO i.V.m § 107 Abs. 2 TKG bzw. auf Grundlage der gesetzlichen Erlaubnis gem. § 107 Abs. 2 u. 3 TKG.

Die Protokollierung des Anmeldeverfahrens erfolgt auf Grundlage unserer berechtigten Interessen gem. Art. 6 Abs. 1 lit. f DSGVO und dient dem Nachweis der Einwilligung in den Empfang des Newsletters.

Newsletterempfänger können den Empfang unseres Newsletters jederzeit kündigen, d.h. Ihre Einwilligungen widerrufen. Einen Link zur Kündigung des Newsletters finden sie am Ende eines jeden Newsletters. Damit erlöschen gleichzeitig ihre Einwilligungen in die Erfolgsmessung. Ein getrennter Widerruf der Erfolgsmessung ist leider nicht möglich, in diesem Fall muss das gesamte Newsletterabonnement gekündigt werden. Mit der Abmeldung von Newsletter, werden die personenbezogenen Daten gelöscht, es sei denn deren Aufbewahrung ist rechtlich geboten oder gerechtfertigt, wobei deren Verarbeitung in diesem Fall nur auf diese Ausnahmezwecke beschränkt wird. Wir können insbesondere die ausgetragenen E-Mailadressen bis zu drei Jahren auf Grundlage unserer berechtigten Interessen speichern bevor wir sie für Zwecke des Newsletterversandes löschen, um eine ehemals gegebene Einwilligung nachweisen zu können. Die Verarbeitung dieser Daten wird auf den Zweck einer möglichen Abwehr von Ansprüchen beschränkt. Ein individueller Löschungsantrag ist jederzeit möglich, sofern zugleich das ehemalige Bestehen einer Einwilligung bestätigt wird.