Thank you for your interest in our company. We take data protection very seriously.
In principle, you can use our website without providing any personal data. If a person concerned wishes to use services of our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we always obtain the consent of the person concerned.
The processing of personal data (e.g. name, address, e-mail address or telephone number of a person concerned) is always carried out in accordance with the Basic Data Protection Regulation (DSGVO) and in compliance with the country-specific data protection regulations applicable to us.
With the following data protection declaration, we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. This data protection declaration also informs affected persons about their rights.
As the data controller, we have implemented numerous technical and organizational measures to ensure that the personal data processed via our website is protected as completely as possible. However, data transmissions via the Internet can generally contain security gaps. Therefore, a 100% protection cannot be guaranteed. For this reason, every person concerned can, of course, also alternatively transmit personal data to us, e.g. by telephone.
1. definitions of terms
This data protection declaration is based on the definitions used by the European legislator for directives and regulations when the DSGVO was issued (Article 4 DSGVO). This data protection declaration should be both easy to read and easy to understand for every person. To ensure this, we would first like to explain the terms used. These definitions are used in this data protection declaration:
"personal data" shall mean any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person
"data subject" shall mean any identified or identifiable natural person whose personal data are processed by the controller
"processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction
"Restriction of processing" means the marking of stored personal data with a view to limiting their processing in the future;
"profiling" means any automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular with a view to analysing or predicting aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, whereabouts or movements of that natural person
"controller" shall mean the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or national law, provision may be made for the controller or for the specific criteria for his identification in accordance with Union or national law
"recipient' shall mean any natural or legal person, public authority, agency or any other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the context of a specific investigation task under Union or Member State law shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in conformity with the purposes of the processing;
"third party" means any natural or legal person, public authority, agency or any other body, other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data
data subject's "consent" shall mean any freely given specific, informed and unequivocal expression of his or her wishes in the form of a declaration or other unequivocal affirmative act by which the data subject signifies his or her consent to the processing of personal data relating to him or her.
2. the name and contact details of the controller
This data protection information applies to the data processing by:
Responsible: peppermint anime gmbh, represented by the managing director Mr. Patrick Keller, E-Mail: firstname.lastname@example.org, Fax: +49 (0)89 999 83 971
3. collection and storage of personal data as well as type and purpose of their use
a) When visiting the website
You can use our website without disclosing your identity. When you call up our website, the browser used on your end device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is recorded without your intervention and stored until it is automatically deleted:
IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which the access is made (referrer URL),
the browser used and, if applicable, the operating system of your computer and the name of your access provider.
The above-mentioned data will be processed by us for the following purposes:
To ensure a smooth connection of the website,
Ensuring a comfortable use of our website,
Evaluation of system security and stability and
for further administrative purposes.
The legal basis for data processing is Art. 6 Par. 1 S. 1 letter f DSGVO. Our legitimate interest follows from the above listed purposes for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
b) When using our contact form
If you have any questions of any kind, we offer you the opportunity to contact us using a form provided on our website. It is necessary to provide a valid e-mail address so that we know who the inquiry comes from and can answer it. Further information can be provided voluntarily. It is your free decision whether you want to enter this data in the contact form.
The data processing for the purpose of contacting us is carried out in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO on the basis of your voluntarily given consent.
The personal data collected by us for the use of the contact form will be automatically deleted after the completion of your request.
c) For orders via our website
You can either place orders through our website as a guest without registering, or register in our store as a customer for future orders. Registration has the advantage for you that you can log in to our store directly with your e-mail address and password without having to enter your contact data again.
Your personal data will be entered into an input mask and transmitted to us and stored. If you place an order via our website, we will collect the following data both in case of a guest order and in case of a registration in our store:
Salutation, first name, last name,
a valid e-mail address,
Telephone number (fixed and/or mobile)
The collection of this data is carried out,
to be able to identify you as our customer;
to be able to process, fulfill and handle your order;
to correspond with you;
to process any liability claims that may exist and to assert any claims against you;
to ensure the technical administration of our website;
to manage our customer data.
During the ordering process, your consent to the processing of this data is obtained.
The data processing is carried out upon your order and/or registration and is required according to Art. 6 para. 1 p. 1 lit. b DSGVO for the purposes mentioned for the appropriate processing of your order and for the mutual fulfilment of obligations arising from the purchase contract.
The personal data collected by us for the processing of your order will be stored until the expiry of the statutory storage obligation and deleted thereafter, unless we are obliged to store the data for a longer period of time in accordance with Article 6 Paragraph 1 S. 1 lit. c DSGVO on the basis of tax and commercial law storage and documentation obligations (from HGB, StGB or AO) or you have consented to storage beyond this in accordance with Article 6 Paragraph 1 S. 1 lit. a DSGVO.
4. transfer of data
Your personal data will be passed on by us to third parties exclusively to the service partners involved in the execution of the contract, e.g. the logistics company commissioned with the delivery and the credit institute commissioned with payment matters. In cases where your personal data is passed on to third parties, the scope of the data transmitted is limited to the necessary minimum.
Your personal data will not be transferred to third parties for purposes other than those mentioned above.
We also only pass on your personal data to third parties if:
you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
the disclosure pursuant to Art. 6 para. 1 sentence 1 letter f DSGVO is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
in the event that there is a legal obligation to pass on the data pursuant to Art. 6 para. 1 sentence 1 lit. c DSGVO, and
this is legally permissible and, in accordance with Art. 6 Para. 1 S. 1 lit. b DSGVO, required for the processing of contractual relationships with you.
During the ordering process, you will be asked for your consent to pass on your data to third parties.
5. external contents and/or processing of data outside the EU
On our website we use active Java-Script content from external providers. By calling up our website, these external providers may receive personal information about your visit to our website. In this context, data may be processed outside the EU. You can prevent this by installing a Java-Script blocker such as the browser plugin 'NoScript' (www.noscript.net) or by deactivating Java-Script in your browser. This may result in functional restrictions on the websites you visit.
Information is stored in the cookie that is related to the specific terminal device used. This does not mean, however, that we obtain direct knowledge of your identity.
In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your end device for a certain defined period of time. If you visit our site again to make use of our services, we will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again.
The data processed by cookies is required for the above-mentioned purposes to protect our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or so that a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of our website.
7. links to third party websites
The links published on our website are researched and compiled by us with the greatest possible care. However, we have no influence on the current and future design and content of the linked pages. We are not responsible for the content of the linked pages and expressly do not adopt the content of these pages as our own. For illegal, incorrect or incomplete contents as well as for damages resulting from the use or non-use of the information, only the provider of the linked website is liable. The liability of the person who merely refers to the publication by a link is excluded. We are only responsible for third-party references if we have positive knowledge of them, i.e. also of any illegal or criminal content, and if it is technically possible and reasonable for us to prevent their use.
8. analysis and tracking tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO. With the tracking measures we use, we want to ensure a needs-based design and the ongoing optimization of our website. On the other hand, we use the tracking measures to record the use of our website statistically and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified in the sense of the above-mentioned regulation.
The respective data processing purposes and data categories can be taken from the corresponding tracking tools.
a) Google Analytics1
For the purpose of designing our pages to meet your needs and continuously optimizing them, we use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymized user profiles are created and cookies (see section 5) are used. The information generated by the cookie about your use of this website such as
operating system used,
Referrer URL (the previously visited page),
Host name of the accessing computer (IP address),
Time of the server request,
are transmitted to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities and to provide further services connected with the use of the website and the Internet for the purposes of market research and the design of these Internet pages in line with requirements. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other data from Google. The IP addresses are made anonymous, so that an assignment is not possible (IP masking).
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on the above link. An opt-out cookie will be set to deactivate the collection of data by Google Analytics for this website, which will prevent the future collection of your data when you visit our website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
For more information on data protection in connection with Google Analytics, please refer to the following link in the Google Analytics help: https://support.google.com/analytics/answer/6004245?hl=de
b) Google Adwords Conversion Tracking
In order to record the use of our website statistically and to evaluate it for the purpose of optimizing our website for you, we also use Google Conversion Tracking. Google Adwords sets a cookie (see point 5) on your computer if you have reached our website via a Google display.
These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of the Adwords client's website and the cookie has not yet expired, Google and the client can recognize that the user clicked on the ad and was redirected to this page.
Each Adwords client receives a different cookie. Cookies can therefore not be tracked through the websites of Adwords clients. The information collected through the conversion cookie is used to compile conversion statistics for Adwords clients who have opted for conversion tracking. The Adwords customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.
9. social media plugins
We use social plugins of social networks (e.g. Facebook, Twitter, Google+) on our website on the basis of Art. 6 para. 1 p. 1 lit. f DSGVO to make our company better known. The advertising purpose behind this is to be regarded as a legitimate interest within the meaning of the DSGVO. The responsibility for data protection compliant operation is to be guaranteed by their respective providers. The integration of these plugins by us is done by the so-called two-click method to protect visitors of our website in the best possible way.
On our website, social media plugins from Facebook are used to make their use more personal. For this we use the "LIKE" or "SHARE" button. This is an offer from Facebook.
If you call up a page of our website that contains such a plugin, your browser establishes a direct connection with the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser, which integrates it into the website.
Through the integration of the plugin, Facebook receives the information that your browser has called up the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook for everyone to see.
Facebook may use this information for the purposes of advertising, market research and the design of Facebook pages to meet the needs of the user. For this purpose, Facebook creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services associated with the use of Facebook.
If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.
The purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options for protecting your privacy, can be found in the data protection information, in particular the Facebook data policy, which you can view under the following link: https://www.facebook.com/about/privacy/
On our website are plugins of the short news network of Twitter Inc. (Twitter) are integrated. You can recognize the Twitter plugins (tweet button) by the Twitter logo on our site. An overview of tweet buttons can be found under this link on Twitter: https://dev.twitter.com/web/tweet-button
If you call up a page on our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter thereby receives the information that you have visited our site with your IP address. If you click on the Twitter "tweet button" while you are logged in to your Twitter account, you can link the contents of our pages on your Twitter profile. This allows Twitter to associate the visit of our pages with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by Twitter.
If you do not want Twitter to be able to link your visit to our pages, please log out of your Twitter user account.
c) Google "+1" button
Our website uses the "+1" button of the social network Google, which is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA. The button is marked with a "+1".
The "+1" button is an abbreviation for "this is pretty cool" or "check it out". The button is not used to record your visits to the web.
If a web page on our site contains the "+1" button, your internet browser will load and display this button from the Google server. The website of our Internet presence that you visit is automatically reported to the Google server. When displaying a +1 button, Google does not permanently log your browser history, but only for a period of up to two weeks.
Google stores this data about your visit for this period for system maintenance and troubleshooting purposes. However, this data is not structured by individual profiles, user names or URLs. This information is also not available to website publishers or advertisers. The use of this information is for maintenance and troubleshooting purposes in Google's internal systems only. Your visit to a page with a +1 button is not evaluated in any other way by Google.
There will be no further evaluation of your visit to a page on our website with a "+1" button.
The assignment of +1 itself is a public process, i.e. anyone who performs a Google search or calls up content on the web to which you give +1 can potentially see that you have given the content in question a +1. So only give +1 if you are sure you want to share this recommendation with the world.
A click on this +1 button will serve as a recommendation to other users in Google's search results. You can publicly say that you like our website, that you approve of our website, or that you can recommend our website. If you have registered for Google+ and are logged in, the +1 button turns blue when you click it. The +1 will also be added to the +1 tab in your Google profile. On this tab you can manage your +1 and decide if you want to make the +1 tab public.
In order to store your +1 recommendation and make it public, Google collects information about the URL you recommend, your IP address and other browser-related information through your profile. If you cancel your +1, this information is deleted. All of your +1 recommendations are listed on the +1 tab in your profile.
10. rights of data subjects
You have the right:
to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you may request information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, cancellation, limitation of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof;
in accordance with Art. 16 DSGVO, to immediately demand the correction of incorrect or incomplete personal data stored by us;
pursuant to Art. 17 DSGVO to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
pursuant to Art. 18 DSGVO, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 DSGVO;
in accordance with Art. 20 DSGVO, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party;
in accordance with Art. 7 para. 3 DSGVO, to revoke your consent to us at any time. As a result, we may no longer continue data processing based on this consent for the future and
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
11. right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1, sentence 1, letter f) DSGVO, you have the right to object to the processing of your personal data pursuant to Art. 21 DSGVO, if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without specifying a special situation.
If you wish to exercise your right of revocation or objection, simply send an e-mail to: email@example.com
12. data security
We use the common SSL (Secure Socket Layer) procedure within the website visit in connection with the highest encryption level supported by your browser. Usually this is a 256 bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.
We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
13th topicality and amendment of this data protection declaration
It may become necessary to amend this data protection declaration as a result of the further development of our website and offers above or due to changes in legal or official requirements. The current data protection declaration can be called up and printed out at any time on our website under the following link:
Source: Sample data protection declaration prepared by attorney Andreas Gerstel (http://www.anwaltblog24.de/)