Privacy policy

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Dominic VAH

Your rights as a data subject

Using the contact details of our data protection officer provided below, you may exercise the following rights at any time:

Information about your data stored by us and its processing (Art. 15 GDPR),

Rectification of inaccurate personal data (Art. 16 GDPR),

Erasure of your data stored by us (Art. 17 GDPR),

Restriction of data processing, insofar as we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),

Objection to the processing of your data by us (Art. 21 GDPR) and

Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you may revoke it at any time with effect for the future. You may also lodge a complaint with a supervisory authority at any time, e.g. the authority responsible for your place of residence or the authority responsible for us as the controller. A list of supervisory authorities (for the non‑public sector) including addresses can be found here.

Collection of general information when visiting our website

Type and purpose of processing:

When you access our website (i.e. if you do not register or otherwise submit information), general information is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.

They are processed for the following purposes in particular:

Ensuring a smooth connection setup to the website,

Ensuring the smooth use of our website,

Evaluating system security and stability, and

to optimise our website.

We do not use your data to draw conclusions about your identity. Such information may be anonymised and evaluated statistically to optimise our website and the underlying technology.

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

Recipients:

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Storage period:

Data is deleted as soon as it is no longer required for the purpose for which it was collected. For data required to provide the website, this is generally the case when the respective session ends.

Provision required or necessary:

Providing the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, certain services may not be available or may be restricted. For this reason, an objection is excluded.

Cookies

Like many other websites, we use so‑called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.

You can delete individual cookies or all cookies. You can also find information and instructions on how to delete cookies or block their storage in advance. Depending on your browser provider, you can find the required information at the following links:

Mozilla Firefox

Internet Explorer

Google Chrome

Opera

Safari

Storage period and cookies used:

If you allow us to use cookies via your browser settings or consent, the following cookies may be used on our website:

Google Analytics, 1 hour

Technically necessary cookies

Type and purpose of processing:

We use cookies to make our website more user‑friendly. Some elements of our website require the browser to be recognised even after changing pages.

The purpose of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without cookies. For these, it is necessary that the browser is recognised even after changing pages.

We require cookies for the following applications:

Legal basis and legitimate interest:

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user‑friendly design of our website.

Recipients:

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Provision required or necessary:

Providing the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, certain services may not be available or may be restricted.

Objection

Please read the information about your right to object under Art. 21 GDPR below.

Non-essential cookies

We also use cookies to better tailor the content on our website to our visitors’ interests or to improve it generally based on statistical analysis.

Which providers set cookies can be found in the information below on the display, tracking, remarketing and web analytics technologies used.

Legal basis:

The legal basis for these processing operations is your consent in each case, Art. 6(1)(a) GDPR.

Recipients:

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Further recipients can be found in the information below on the display, tracking, remarketing and web analytics technologies used.

Third-country transfer:

Please refer to the lists of the individual display, tracking, remarketing and web analytics providers for information on this.

Provision required or necessary:

Of course, you can generally view our website without cookies. Web browsers are usually set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings (see withdrawal of consent).

Please note that some functions of our website may not work if you have disabled cookies.

Withdrawal of consent:

You can withdraw your consent at any time via our cookie consent tool.

Profiling:

To what extent we analyse the behaviour of website visitors using pseudonymised user profiles can be found in the information below on the technologies used.

Contact form

Type and purpose of processing:

The data you enter is stored for the purpose of individual communication with you. Providing a valid email address and your name is required. This serves to assign the enquiry and to respond to it. Providing additional data is optional.

Legal basis:

Processing of the data entered in the contact form is based on our legitimate interest (Art. 6(1)(f) GDPR).

By providing the contact form, we want to enable you to contact us easily. The information you provide is stored to process the request and for possible follow‑up questions.

If you contact us to request a quotation, the data entered in the contact form is processed to carry out pre‑contractual measures (Art. 6(1)(b) GDPR).

Recipients:

Recipients of the data may include processors.

Storage period:

Data will be deleted no later than 6 months after the enquiry has been processed.

If a contractual relationship arises, we are subject to statutory retention periods under the German Commercial Code and will delete your data after these periods expire.

Provision required or necessary:

Providing your personal data is voluntary. However, we can only process your enquiry if you provide your name, email address and the reason for your enquiry.

Use of Google Analytics

If you have given your consent, Google Analytics is used on this website, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (“Google”). Google Analytics uses so‑called “cookies”, i.e. text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymisation on these websites, your IP address is shortened by Google within EU member states or other states party to the EEA agreement. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

For more information on terms of use and privacy, see here

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website and internet use to the website operator.

The data we send and that is linked to cookies, user IDs or advertising IDs is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Withdrawal of consent:

You can prevent tracking by Google Analytics on our website by click here An opt‑out cookie will be installed on your device. This prevents Google Analytics from collecting data for this website and this browser in the future as long as the cookie remains installed in your browser.

You can also prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to use all functions of this website in full.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug‑in available under the following link: Browser add‑on to deactivate Google Analytics.

Use of script libraries (Google Web Fonts)

To display our content correctly and attractively across browsers, we use “Google Web Fonts” provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) to display fonts.

More information about Google Web Fonts can be found here and in the privacy policy of Google

SSL encryption

To protect the security of your data during transmission, we use state‑of‑the‑art encryption methods (e.g. SSL) via HTTPS.

Information about your right to object under Art. 21 GDPR

Right to object on a case‑by‑case basis

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Changes to our privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions for the data protection officer

If you have questions about data protection, please email us or contact the person responsible for data protection in our organisation directly: info@spielzeugmanufaktur.com