This data protection declaration gives you an overview of the processing of your personal data when using the offers and online services on the website at https://www.inpera.de (the "Website"). This data protection declaration also informs you about your rights and the possibilities to control your personal data and to protect your privacy.
Inpera GmbH Kurfürstenstrasse 87, 10787 Berlin, Germany is responsible for data processing. This company is also meant when the terms "we" or "us" are used in the following.
You can reach our data protection officer at the address given above and at firstname.lastname@example.org .
We have taken technical and organizational measures to ensure the security of your personal data. For example, we use encryption using the Secure Socket Layer (SSL) when processing and storing data.
You are not legally obliged to provide us with the personal data provided in this data protection declaration. In particular, the contractual relationship that you have entered into with us by agreeing to our terms and conditions does not include any obligation to provide your personal data. However, the transmission of the contract information provided by you to us is a basic requirement for the conclusion of a contract with us. In addition, you cannot or only use the website to a limited extent if you do not provide us with certain data or object to the use of this data.
1. WHAT PERSONAL DATA WE PROCESS AND FROM WHICH SOURCES THEY COME FROM:
When we make our website available to you, we process personal data from various sources. On the one hand, this is data that we automatically process for every visitor when the website is called up. However, this can also be data that you have voluntarily provided to us.
Data that we collect automatically when you use our website:
As soon as you visit the website, you send technical information to our web server. This happens regardless of whether you make a booking or if you subsequently register with an account with us to use the website. In any case, we collect the following access and web access data (which we call "usage data"):
Date and time of visit and duration of use of the website;
The IP address of your device;
the referral URL (the website from which you may have been redirected);
the visited sub-pages of the website or sub-pages of the app;
Your internet service provider and
Further information about your device (device type, browser type, and version as well as settings, installed plugins, operating system).
We process the usage data to enable you to use the website and to ensure the functionality of the website, in particular, to show you the correct language version. In addition, we process the usage data in order to analyze the performance of the website, to continuously improve the website, and to correct errors or to personalize the content on the website for you. We also process the usage data in order to ensure IT security and the operation of our systems and to prevent or detect misuse, especially fraud.
We only store this usage data in an anonymous form, so that it is no longer possible to identify you personally.
Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called "session cookies"). Other cookies, on the other hand, remain on your device and enable us to recognize your browser the next time you visit (so-called "persistent cookies"). You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of the website may be restricted.
Data that you transmit to us yourself
In addition to the data that we receive from all visitors, we also process other data. The exact amount of this data depends on how you use the website. You can use the website with and without a user account.
If you decide to create an account, please tell us:
Your email address and login password
The company, department (optional)
VAT ID (optional)
Company address (street / no., Postcode, country)
Information about the payment method you have chosen and the billing address.
The data entered during registration are used for the purpose of providing the website and for notification by e-mail about all information relevant to the website or for registration, such as changes in the scope of the website or the technical conditions. If you give your separate consent, we will also save your email address for sending our newsletter, with which we will inform you about our latest promotions, products or offers.
If you contact customer service at the contact address email@example.com or via the contact form on the website, the written communication between you and the service staff as well as notes on the respective process will be saved until it is completed so that you can do so again to ensure smooth customer service at all times during the process by other service employees.
2. THE PURPOSES FOR WHICH WE ALSO PROCESS YOUR DATA:
We have already informed you of the purposes for which we process your data in individual cases. In addition, we can process your data for other purposes if necessary. This includes, for example, the transfer of your personal data to third parties if we are legally obliged to do so, but also the assertion of legal claims on our part or the defense against legal disputes.
3. THE LEGAL BASIS FOR PROCESSING:
When processing your personal data, we rely on various legal bases in accordance with the so-called General Data Protection Regulation, an EU-wide legal framework to standardize data protection law ("GDPR" for short). The details are:
Your consent (Article 6 Paragraph 1 a) GDPR)
By registering with your account data or making a booking, you expressly consent to the data processing described in detail in this data protection declaration by ticking the box before sending the registration or contact form: If we process your data as part of the provision of your user account, it is because you have consented to this. Your consent is therefore the most important legal basis for the processing of your personal data by us.
Fulfillment of our contractual obligations to you (Article 6 Paragraph 1 b) GDPR)
At the same time, the processing of your data also takes place for the provision of the website as part of the performance of our contract with you. Accordingly, in most cases the processing is justified not only by your consent, but also because it is necessary to fulfill our contract with you. If you book via the website, for example, it is necessary to process the booking data (for example, by sending it to the logistics partner) in order to make your booking.
Our legitimate interests (Article 6 paragraph 1 f) GDPR)
There are also cases in which we would be entitled to process your data without your consent because it is necessary to protect our legitimate interests (or the interests of third parties). In this respect, the purposes described above for which we process your data also represent legitimate interests in many cases. This means that we can process the data necessary to ensure the security of our IT systems in any case, even if you give your consent have not given or revoked this processing. This also applies to the prevention of misuse of our website or the personalization of advertisements to your interests (so-called direct marketing).
Legal requirements (Article 6 paragraph 1 c) GDPR) or in the public interest (Article 6 paragraph 1 e) GDPR)
In addition, we are legally obliged to process certain data in individual cases in order to provide information to law enforcement or tax authorities.
4. TO WHOM WE SHARE YOUR INFORMATION:
With the exception of the service providers and partners described in more detail below, we will not pass on your data to third parties. Insofar as the recipients of the data listed process them on our behalf, these recipients will process your data solely on our instructions and have undertaken to comply with strict requirements for the security of your data.
In order to complete your booking and secure your right to the respective delivery, we pass on your name and the specified contact details (e.g. telephone number) to our trading and logistics partners in order to fulfill our contract with you and to provide you with the requested services or goods to be able to.
In addition, we transmit data to our hosting service provider, who enables us to provide the website, InterNetX GmbH, Johanna-Dachs-Str. 55, 93055 Regensburg, Germany. We use the cloud solution from shopware AG, Ebbinghoff 10, 48624 Schöppingen to display our online shop for users with a user account. The providers listed in our information on cookies and tracking tools are only sent your anonymized data, which is explained in more detail there.
5. DATA PROCESSING OUTSIDE THE EEA:
We generally do not transmit your access and account data to countries outside the EEA (so-called "third countries"). We do not host your data in third countries and all of your data is on the servers located in Germany.
In some cases, however, your data will be processed in third countries. This particularly affects third-party cookies provided by companies based in the United States. However, as explained above, we will ensure that an adequate level of data protection is guaranteed at all times. We ensure that the data recipients are either certified according to the so-called "EU Privacy Shield" (as with Google or Hubspot) or that the so-called EU standard contractual clauses are included in our contracts with these providers to ensure the security of processing and a to ensure an adequate level of data protection.
We process and store your personal data insofar as this is necessary to fulfill our contractual or legal obligations. We, therefore, store the data for as long as our contractual relationship with you exists and after termination only to the extent and for as long as the law of the Federal Republic of Germany requires. All other data will be deleted if you log out of the website or are no longer required to complete a booking. If the other data for the fulfillment of legal obligations (e.g. according to tax or commercial law) are no longer needed after you have unsubscribed or completed your booking (insofar as this was done without creating a user account), they will be deleted regularly, unless their further processing is required to preserve evidence or to defend against legal claims against us. To secure evidence, your IP address and the exact time of issue, for example, is required if you have given us your consent (for example, to receive the newsletter).
7. USER PROFILES:
We use your data to create a user profile. This means that we use your data to provide you with a personalized website based on your personal preferences and interests and to provide you with tailor-made offers based on your previous behavior. For example, your computer's IP address is used to identify your geographic location and offer you localized content in your local language. In addition, we can offer you suggestions and offers for new services based on your previous bookings. However, we will never process and analyze your personal data in the context of this user profile in such a way that this leads to an automated decision that is legally effective for you or similarly significantly affects you.
8. YOUR LEGAL RIGHTS UNDER THE GDPR:
You can assert the following rights against us under the GDPR in relation to your personal data:
Your right to information in accordance with Article 15 GDPR,
Your right to rectification in accordance with Article 16 GDPR,
Your right of withdrawal according to Article 17 GDPR,
Your right to restriction of processing in accordance with Article 18 GDPR and
Your right to data portability in accordance with Article 20 GDPR.
You also have the right to lodge a complaint with the responsible data protection supervisory authority (Article 77 GDPR in conjunction with Section 19 BDSG).
You can also withdraw your consent to the processing of your personal data at any time. This also applies to the revocation of declarations of consent that we received prior to the validity of the GDPR, i.e. before May 25, 2018. However, this revocation only applies to the future. Processing that took place before the revocation remains unaffected.
Information about your right to object in accordance with Article 21 GDPR
8.1. RIGHT TO OBJECT
In addition to the rights already mentioned, you have the right to object to the processing of your personal data at any time for reasons that arise from your particular situation, based on Article 6 (1) e GDPR (data processing in the public interest) and Article 6 para. 1 f GDPR (data processing based on a balance of interests). If you file an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise, or defend legal claims.
8.2. RIGHT TO OBJECT AGAINST THE PROCESSING OF DATA FOR PROMOTIONAL PURPOSES
You also have the right at any time to object to the processing of your personal data for the purpose of direct marketing (including the subscription to our newsletter); this also applies to the creation of a user profile (so-called "profiling"), insofar as it is connected to direct marketing. If you file an objection, we will no longer process your personal data in the future.
Please note that you will not use the website or only use it to a limited extent if you do not provide us with certain data or if you object to the use of this data.
The objection can be made informally and should be sent to firstname.lastname@example.org
INFORMATION ON COOKIES AND WEB TRACKING
Our own cookies (so-called "first-party cookies"):
We use these cookies to analyze web traffic, adjust services, content, and advertisements, measure the effectiveness of advertising campaigns and promote trust in and security of the website. In addition, we use first-party cookies to distinguish one user from another and to determine the total number of visitors to the website in connection with the log files of our web server. The web usage data collected in this way help us to obtain the necessary feedback in order to constantly improve the website and serve the users better.
Cookies and plugins that transmit data to third parties (so-called "third-party cookies"):
In addition to the first-party cookies, we also use the following third-party cookies and plugins, which are made available to us by the following parties.
The legal basis for data processing by the providers named below on our website is Article 6 Paragraph 1 f GDPR since we use these services exclusively for analysis purposes or for (direct) marketing.
Note on the use of Google services:
The information generated by the cookie (browser type, operating system, referral URL, IP address, access time) about your use of our website is usually transferred to a Google server in the USA and stored there. However, within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area, your IP address will first be shortened by Google on our website. For this purpose we have the code "gat._anonymizeIp ();" implemented to ensure anonymous collection of IP addresses (so-called IP masking).
As part of Google Analytics, Google will use the information about your use of the website on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services related to the use of the website and the internet. The shortened IP address transmitted by your browser as part of Google Analytics and Google Tag Manager will not be merged with other Google data.
You can prevent cookies from being saved by setting your browser software or the operating system of your mobile device accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. In addition, you can prevent the collection of the data generated by the cookie about your use of our website (including IP address) by Google and its processing by Google by downloading and installing the browser plug-in under the following link: http: // tools.google.com/dlpage/gaoptout .
Note on using Hubspot:
We use Hubspot for our Customer Relationship Management, a service of Hubspot Inc., HubSpot Headquarters (Cambridge, MA), 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA ("Hubspot"). Hubspot is certified under the EU-US Privacy Shield ( https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG ).
So-called web beacons are used and cookies are also set. Hubspot evaluates the information collected (e.g. IP address, geographical location, type of browser, domain of our website and subpages accessed, the time of the first visit, the time of the last visit, the time of the current visit and a session number) on our behalf to create reports about the visit and the subpages visited. However, we currently do not use this function on our website.
Further information on how Hubspot works can be found in the data protection declaration of Hubspot Inc. at: http://legal.hubspot.com/de/privacy-policy . You can find information on Hubspot cookies at https://legal.hubspot.com/de/cookie-policy and https://knowledge.hubspot.com/articles/kcs_article/reports/what-cookies-does-hubspot- set-in-a-visitor-s-browser .