Privacy Policy

A. Responsible for data processing

The following company is responsible for processing personal data as part of this web presence in accordance with the requirements of the General Data Protection Regulation (GDPR):

Kalfany Süße Werbung GmbH & Co. KG
Industriegebiet West
Holzmattenstraße 22
D-79336 Herbolzheim
Tel. +49 (0) 7643 / 801-0
Fax +49 (0) 7643 / 801-20
info@ksw24.com

Our data protection officer:

Matthias Rosa
RMPRIVACY
Am Winterhafen 78
D - 55131 Mainz
phone: +49 6131 / 1445615
datenschutz@ksw24.com

We would like to use this Privacy Policy to inform you about the extent your personal data (hereinafter referred to simply as “data”) will be processed.

B. Data processing

We process data as part of the operation of our website. The processing of the data will also include disclosure of the data when it is transferred.

Transfer of data to the USA is covered by a European Commission adequacy decision, the EU-US “Privacy Shield”. In the decision, the Commission has certified that the guarantees for the transfer of data to the US, based on the EU-US Privacy Shield, comply with EU data protection standards. Where we submit data to the USA, we have identified that our service providers participate in the EU-US Privacy Shield.

The specific data involved, the purposes behind the processing, the legal bases, recipients and transfers to third countries are listed below:

a) Log file

We keep a record of your visits to our website. The following data is processed as part of our record: Name of the website visited, date and time of the visit, the volume of data transferred, browser type and version, the operating system you use, the referrer URL (of the website you visited directly beforehand), your IP address and the requesting provider. This is necessary to ensure the security of the website. We process the data for the purposes of our legitimate interests, in accordance with Article 6 (1) f) GDPR. The log file will be deleted after seven days, unless it is required to clarify or to prove specific infringements of the law that have come to light during the retention period.

b) Hosting

All data that needs be processed in connection with the operation of this website will be stored as part of the hosting process. This is necessary to ensure the operation of the website. We process the data for the purposes of our legitimate interests, in accordance with Article 6 (1) f) GDPR. In order to deliver our online presence, we use the services of web hosting providers to whom we provide the data mentioned above.

c) Contacting us

If you contact us, your data (name, contact details, if you provide them) and your message will be processed solely for the purpose of processing and dealing with your enquiry. In order to deal with your enquiry, this data will be processed by us on the basis of Article 6 (1) b) GDPR or Article 6 (1) f) of the GDPR.

d) Newsletter

So that we can send you regular information about our company and our offers, we offer you the option of receiving a newsletter. When you sign up for the newsletter, we will process the data you enter (email address and other voluntarily provided information).

When you sign up for the newsletter, we will obtain the following consent:

“[ ] I would like to order the “Kalfany Süße Werbung” newsletter. I may withdraw my consent at any time by sending an email to newsletter@ksw24.com or by using the unsubscribe link in the newsletter”.

This newsletter will be sent to you following registration on the basis of your prior consent, in accordance with Article 6 (1) a) GDPR.

Signing up for our newsletter is carried out according to the so-called double opt-in procedure. In order to prevent fraudulent activity, we will send you an email after you register, asking you to confirm your registration. In order to prove that the registration process has occurred in accordance with legal requirements, your registration will be recorded. This will also include storing the time of registration and confirming your IP address. We use service providers to send the newsletter, and we provide them with the data mentioned above.

The data will be transferred to the servers of the following service providers in Germany:

CleverReach GmbH & Co. KG
Mühlenstr. 43
26180 Rastede

e) Website analysis and marketing

In order to enable the use of certain functions, we use so-called “cookies”. These are small data packets that are stored on your device and exchanged with other providers. Some of the cookies we use are deleted immediately after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your computer when you visit next (persistent cookies).

You can delete all cookies stored on your computer and change the settings on most browsers to prevent cookies from being stored.

If you do this, you may have to reconfigure some of the settings manually every time you visit this website and accept some loss of functionality.

We use cookies in connection with the following features:

aa) Google Analytics

We use Google Analytics, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google uses certain cookies. The information generated by the cookies about your use of this website (including your IP address) will be transferred to a Google server in the USA and stored there. We use the information stored to analyse your use of the website, compile reports on website activity for the website operators and provide other services related to use of the website. We process the data we obtain for our primary interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR. Google will not associate your IP address with other Google data under any circumstances.

Please note that this website uses Google Analytics with the extension “anonymizeIp()”. This truncates IP addresses before transferring them to a server in the United States. This means that there will usually be no direct personal link to the stored data. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there.

You may object to the collection of data at any time, and with effect for the future, by using the Google Analytics deactivation browser add-on, found at

http://tools.google.com/dlpage/gaoptout?hl=de.

Please refer to the guidance on Google data usage in the Google Partner Network at:

http://www.google.com/intl/de/policies/privacy/partners/

www.google.de/privacy_ads.html

Google’s certification can be found at:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information about data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de

bb) Google remarketing/retargeting

We use so-called “tracking cookies” on our website. When you visit our site, permanent cookies store information about which products you have viewed on our website, and via which third-party ads and pages users access our website. If you visit one of our partner websites at a later date, we can display personalised advertising for you based on the items you viewed on our website.

We process the data we obtain for our primary interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR. The information generated by the cookies about your use of this website (including your IP address) will be transferred to a Google server in the USA and stored there.

Google’s certification can be found at:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information about data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de

f) Integration of external content

We use dynamic content from external sources to optimise the presentation of our website and what it offers. When you visit the website, a request is automatically made via the API to the content provider’s server, and specific log data (such as the users’ IP addresses) is transferred. The dynamic content is then transferred to our website and displayed there.

We use external content in connection with the following features:

aa) Integration of YouTube videos

We have videos from the YouTube portal belonging to YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”) integrated into our website. When you play the videos, log data will be transferred to YouTube's servers in the USA. We process the data we obtain for our overriding legitimate interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR.

YouTube’s certification can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information can be found at: https://policies.google.com/privacy?hl=de&gl=de

bb) Google Maps

We use Google's “Google Maps” map service on our website to provide you with an interactive map. When you display the map, data, including your IP address and location, will be transferred to the Google server in the USA and stored there. We process the data we obtain for our overriding legitimate interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR.

Google’s certification can be found at:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information about data protection can be found at: https://policies.google.com/privacy?hl=de&gl=de

cc) Trustmark

Following an order, the Trusted Shops Trustbadge is incorporated into this web page in order to display our Trusted Shops trustmark and Trusted Shops products for buyers. The Trustbadge and the services advertised with it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.

When the Trustbadge is retrieved, your IP address, the date and time of retrieval, the quantity of data transferred and the name of the requesting provider (access data) will be transferred to the Trusted Shops servers. This access data will not be analysed and will be automatically overwritten within seven days from the end of your visit to the site. We process the data we obtain for our legitimate interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR .

Additional personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already signed up to use the products. In this event, the contractual agreement between you and Trusted Shops will apply.

In order to analyse user behaviour on our website, optimise our online services and also to personalise content and ads, we use specific cookies that store your IP address.

g) Social plugins

We use third-party plugins on our website. You can use them to let your contacts know whether you like our website, and to highlight or share content. The plugins are indicated by the third-party provider’s logo.

When you visit our site, your data will be transferred to the third-party provider.

If you are also a user of a third-party provider’s website, this data can be assigned to your user account on the provider’s website.

This data may be transferred to the third-party provider even if you are not registered as a user on the third-party provider’s website and do not click on the plugin on our site.

However, if the data is transferred but you have not registered on the third-party provider’s website, no direct connection can be made directly to you via your IP address, for example; this could only happen with information from your provider.

The purpose and scope of the data processing carried out by the third-party provider can be found in the relevant provider’s privacy notice.

We process the data we obtain for our overriding legitimate interest, which is to optimise the marketing of our online offer in accordance with Article 6 (1) f) GDPR.

Plugins from the following providers are used on our website:

  • Facebook plugin, from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Further information can be found at: https://www.facebook.com/privacy/explanation

  • Twitter plugin, from Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active

Further information can be found at: https://twitter.com/de/privacy

  • YouTube plugin, from Google Inc., based in San Bruno/California, USA

The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Further information can be found at: https://policies.google.com/privacy?hl=de&gl=de

  • Instagram plugin, from Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA

The certification can be found at: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

Further information can be found at: https://help.instagram.com/155833707900388

C. Length of time personal data is stored for

We only store personal data for as long as we need it for the purposes for which it is processed or until you withdraw your consent. Where statutory retention periods must be observed, certain data may be stored for up to ten years, irrespective of the purposes for which it was processed.

D. Your rights as a data subject

a) Information

You may request information, free of charge, about all of the personal data that we have stored about you.

b) Rectification, erasure, restriction of processing (blocking), objection

If you no longer consent to the storage of your data or if the data is incorrect, we will arrange for your data to be erased or blocked, or for the necessary rectifications to be made, once we receive instructions to do so (provided this is permissible under the law as it currently stands). The same applies if you only want us to process data in a restricted manner in future.

c) Data portability

Upon request, we will provide you with your data in a commonly used, structured and machine-readable format so that you can, if you wish, transmit the data to another controller.

d) Right to lodge a complaint

In addition, you have the right to lodge a complaint with the competent supervisory authority:

(https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html).

e) Right to withdraw consent with effect for the future

You may withdraw your consent at any time with effect for the future. The withdrawal of your consent will not affect the legality of the processing up to the time you withdraw your consent.

f) Limitations

Data from which we are unable to identify the data subject, where this has been anonymised for the purposes of analysis, for example, is not covered by the above-mentioned rights. The right to information, erasure, blocking, rectification or transfer to another company with respect to this data will only be possible if you make additional information available to us which allows us to identify the data.

g) Exercising your rights as a data subject

If you have any questions about the processing of your personal data, if you would like information about your data or would like your data rectified, blocked or erased, or if you would like to object to the processing of your data or to request data to be transferred to another company, please contact the following newsletter@ksw24.com.