Privacy policy


1. Data protection at a glance

General notes

The following notes provide a simple overview of what happens to your personal information when you visit this website. Personal data is all data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed under this text.

Data collection on this website

Who is responsible for the data collection on this website?

The data processing on this website is carried out by the website operator. The contact details can be found in the imprint of this website.

How do we collect your data?

Your data is collected on the one hand by you informing us of it. For example, this might be data that you enter in a contact form.

Other data is automatically collected when you visit the website through our IT systems. These are mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure a flawless provision of the website. Other data may be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the rectification or deletion of this data. You can contact us at any time at the address given in the imprint for further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. For details, see the Privacy Policy under “Right to Restrict Processing”.

Third-party analytics tools and tools

When you visit this website, your browsing behaviour can be statistically evaluated. This is mainly done with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surf behavior cannot be traced back to you.

You may object to this analysis or prevent it by not using certain tools. Detailed information about these tools and your opposition options can be found in the following Privacy Policy.

2. Hosting and Content Delivery Networks (CDN)

External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. These may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated through a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 sec. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional Provider (Art. 6 sec. 1 lit. f GDPR).

Our host will process your data only to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to this data.

Conclusion of a contract for order processing

In order to ensure data protection-compliant processing, we have concluded a contract for order processing with our hoster.

3. General notes and mandatory information

Privacy

The operators of these sites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data is data that can be used to personally identify you. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating via e-mail) may have security gaps. Complete protection of data against access by third parties is not possible.

Note to the responsible body

The responsible body for data processing on this website is:

1. Chairman Ralf Ludewig
Fashion House Ludewig, Brunnengasse 1, 97688 Bad Kissingen

Phone: 0971/2100
Email: mail@pro-badkissingen.de

The controller is the natural or legal person who decides, alone or together with others, on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of objection to data collection in special cases as well as direct marketing (Art. 21 GDPR)

WHEN THE DATA PROCESSING ON BASIS OF ART. 6 ABS. 1 LIT. E OR F GDPR, HAVE ANY RIGHT, FROM BACKGROUND, THE OUT OF YOUR SPECIAL SITUATION, AGAINST THE PROCESSING OF YOUR PERSONAL DATA TO CHANGE; THIS ALSO FOR A ON THIS DETERMINATIONS SUPPORTED PROFILING. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU ARE IN ACTION, WE WILL NOT MORE YOUR AFFECTED PERSONAL DATA, IT IS NOT, WE CAN USE THE GREEN FOR THE PROCESSING THAT WILL OVERSTATE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVICE OF THE DETERMINATION, EXPERIENCE OR DEFENSE OF RIGHT CLAIMS (WIDERSPRUCH TO ART. 21 ABS. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED TO DIRECT PROMOTION, SO HAVE THE RIGHT, ANY TIME AGAINST THE PERSONAL DATA TO THE COMPANY OF THE COMPANY THIS ALSO FOR THE PROFILING, IF IT IS WITH DIRECT ADVERTISING IN CONNECTION. IF YOU ARE AGAINST, YOUR PERSONAL DATA WILL NOT BE USED MORE FOR DIRECT REGULATION (WIDERSPRUCH NACH ART. 21 ABS. 2 GDPR).

Right of appeal to the competent supervisory authority

In the event of infringements of the GDPR, the persons concerned shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of alleged infringement. The right of appeal shall be without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in the performance of a contract, either to itself or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this is only done as far as it is technically feasible.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as a site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar of the browser changes from “http://” to “https://” and by the lock icon in your browser line.

If SSL or TLS encryption is enabled, the data you submit to us cannot be read by third parties.

Information, deletion and correction

Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and, if applicable, a right to rectification or deletion. of this data. You can contact us at any time at the address given in the imprint for further questions on the subject of personal data.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. To do this, you can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:

  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data is done/happens illegally, you can request the restriction of the data processing instead of the deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you object under Article 21(4) 1 GDPR, a balance must be made between your and our interests. As long as it is not clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may only be used with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest in the European Union or of a Member State.

Objection to promotional emails

The use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information materials is hereby objected to. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, e.g. by spam e-mails.

4. Data collection on this website

Cookies

Our websites use so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic solution is made by your web browser.

In some cases, third-party cookies may also be stored on your device when you enter our site (third-party cookies). These allow us or you to use certain third-party services (e.g. cookies for processing payment services).

Cookies have different functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. shopping cart function or display of videos). Other cookies are used to evaluate user behaviour or to display advertisements.

Technically necessary cookies (e.g. shopping cart cookies) are used on the basis of Art. 1 lit. f GDPR. We have a legitimate interest in the storage of cookies for the technically error-free and optimized provision of our services. Other cookies are only used with your consent on the basis of Art. 1 lit. a GDPR. Consent can be revoked at any time for the future.

You can set your browser to inform you about the setting of cookies and to allow cookies only on a case-by-case basis, to exclude the acceptance of cookies for certain cases or in general, and to automatically delete the cookies when you close the browser. to activate. When disabling cookies, the functionality of this website may be limited.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately within the scope of this data protection declaration and, if necessary, request your consent.

Cookie consent with Borlabs Cookie

Our website uses Borlabs Cookie’s Cookie Consent technology to obtain your consent to the storage of certain cookies in your browser and to document them in compliance with data protection. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (hereinafter Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, where the consents you give or the revocation of these consents are stored. This data will not be passed on to the provider of Borlabs Cookie.

The collected data will be stored until you ask us to delete it or delete the Borlabs cookie itself or the purpose for data storage is omitted. Mandatory statutory retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found under https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs cookie consent technology is used to obtain statutory consent for the use of cookies. The legal basis for this is Article 6(6) of the 1 p. 1 lit. c GDPR.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • Browser type and browser version
  • operating system used
  • Referrer URL
  • Host name of the accessing machine
  • Time of server request
  • IP address

This data is not merged with other data sources.

The collection of this data shall be carried out on the basis of Article 6(4) of the 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

Contact

If you send us enquiries via the contact form, your details from the request form, including the contact details you provide there, will be stored with us for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent.

The processing of this data is carried out on the basis of Article 6(4) of the 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 sec. 1 lit. f GDPR) or on your consent (Art. 6 sec. 1 lit. a GDPR) if this has been requested.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for the data storage is omitted (e.g. after your request has been processed). Mandatory legal provisions, in particular retention periods, remain unaffected.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) for the purpose of processing your request, will be stored and processed by us. We do not share this data without your consent.

The processing of this data is carried out on the basis of Article 6(4) of the 1 lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 sec. 1 lit. a GDPR) and/or on our legitimate interests (Art. 6 sec. 1 lit. f GDPR), as we have a legitimate interest in the effective handling of the requests addressed to us.

The data sent by you to us by contact enquiries shall remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage is omitted (e.g. after your request has been processed). Mandatory legal provisions, in particular statutory retention periods, remain unaffected.

5. Social media

Social media plugins with Shariff

This website uses plugins from social media (e.g. Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr).

As a rule, you can recognize the plugins by means of the respective social media logos. To ensure data protection on this website, we use these plugins only together with the so-called “Shariff” solution. This application prevents the plugins integrated on this website from transmitting data to the respective provider the first time they enter the site.

Only when you activate the respective plugin by clicking on the corresponding button, a direct connection to the server of the provider is established (consent). As soon as you activate the plugin, the respective provider receives the information that you have visited this website with your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, the respective provider can assign the visit to this website to your user account.

The activation of the plugin constitutes consent within the meaning of Art. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future.

6. Analysis tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimize both its website offer and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 1 lit. a GDPR; consent can be revoked at any time.

IP Anonymization

We have activated the IP anonymization feature on this website. This will shorten your IP address from Google within Member States of the European Union or in other contracting states of the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compile reports on website activity and other services relating to website activity and internet usage. to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to the full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by using the browser plug-in available at the following link. download and install: https://tools.google.com/dlpage/gaoptout?hl=de.

Opposition to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set to prevent the collection of your data on future visits to this website: Disable Google Analytics.

For more information on how google analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Demographics at Google Analytics

This website uses the “demographic characteristics” feature of Google Analytics. This allows reports to be generated that contain statements about the age, gender, and interests of page visitors. This data comes from interest-based advertising from Google as well as from visitor data from third parties. This data cannot be associated with a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item “Opposition to data collection”.

Memory duration

Data stored at the user and event level at the user and event level, which is linked to cookies, user IDs (e.g. User ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

1&1 Web Analytics

This website uses the analytics services of 1&1 web analytics. The provider is 1&1 IONOS SE, Elgendorfer Straße 57, D – 56410 Montabaur. As part of the analyses with 1&1, visitor numbers and behaviours (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. which side the visitor comes from), visitor locations and technical data (browser and operating system versions). For this purpose, 1&1 stores the following data in particular:

  • Referrer (previously visited website)
  • requested web page or file
  • Browser type and browser version
  • operating system used
  • Type of device used
  • Time of access
  • IP address in anonymized form (used only to determine the location of access)

According to 1&1, data collection is completely anonymized, so that it cannot be traced back to individuals. Cookies are not stored by 1&1 web analytics.

The storage and analysis of the data shall be carried out on the basis of Article 6(4) of the 1 lit. f GDPR. The website operator has a legitimate interest in the statistical analysis of user behaviour in order to optimize both its website offer and its advertising. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 1 lit. a GDPR; consent can be revoked at any time.

For more information on data collection and processing by 1&1 web analytics, see the following links:

https://hosting.1und1.de/hilfe/online-marketing/
https://hosting.1und1.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-company-name-produktes/webanalytics/
https://hosting.1und1.de/terms-gtc/terms-privacy/

Order processing

We have signed a contract with 1&1 for order processing. This agreement is intended to ensure that 1&1 handles your personal data in a manner that is compliant with data protection.

7. Plugins and tools

YouTube with enhanced privacy

This website includes videos from YouTube. The site is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in advanced privacy mode. According to YouTube, this mode prevents YouTube from storing information about visitors to this website before they watch the video. On the other hand, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. This allows YouTube to connect to the Google DoubleClick network, regardless of whether you’re watching a video.

Once you start a YouTube video on this website, a connection to the YouTube servers is established. The YouTube server will be informed which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

In addition, YouTube can store various cookies on your device after starting a video. With the help of these cookies, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve usability and prevent fraud. The cookies remain on your device until you delete them.

If necessary, after starting a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(4) of the 1 lit. f GDPR. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 1 lit. a GDPR; consent can be revoked at any time.

For more information about privacy at YouTube, please visit its Privacy Policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts

This page uses so-called web fonts provided by Google to display fonts in a consistent way. The Google fonts are installed locally. There is no connection to Google servers.

For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

Google Maps (with consent)

This website uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure privacy on this website, Google Maps is disabled the first time you enter this website. A direct connection to Google’s servers is only established if you activate Google Maps independently (consent according to Art. 6 sec. 1 lit. a GDPR). This prevents your data from being transferred to Google the first time you enter the site.

Once activated, Google Maps will store your IP address. This is then usually transferred to a Google server in the USA and stored there. The provider of this page has no influence on this data transfer after activating Google Maps.

More information on how to handle user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

8. eCommerce and payment providers

Processing of data (customer and contract data)

We collect, process and use personal data only to the extent that it is necessary for the establishment, content or change of the legal relationship (stock data). This is done on the basis of Article 6(6) of the 1 lit. b GDPR, which allows the processing of data for the performance of a contract or pre-contractual measures. We only collect, process and use personal data about the use of this website (use data) to the extent necessary to enable or charge the user for the use of the service.

The customer data collected will be deleted after the conclusion of the order or termination of the business relationship. Legal retention periods remain unaffected.