Privacy policy

General information

In the privacy policy below, you will find detailed information about what happens to your personal data when you visit the website www.rosengarten-gwiazdy.pl. Personal data means any data on the basis of which you can be identified directly or indirectly.


Data processing on this website

Who is responsible for processing data on this website?

Unless stated otherwise below, Rosengarten Polska spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (61-758), ul. Garbary 56, KRS: 0000692067, NIP: 7872119951, REGON: 36809186500000 (hereinafter: Rosengarten Polska) and Rosengarten GmbH, Devern 13, 49635 Badbergen, Germany, registered in the German commercial register under number HRB 19921 by the Local Court of Osnabrück (hereinafter: Rosengarten Germany, together with Rosengarten Polska “we”, “us”), are joint controllers with regard to the processing of your data on the website www.rosengarten-gwiazdy.pl.

Rosengarten Germany has appointed a data protection officer, who can be contacted at the following e-mail address: info@rosengarten-sterne.de
Erik Delfs
Devern 13, 49635 Badbergen
Telephone: (+49) 05433 21180
E-mail: info@rosengarten-sterne.de

In order to ensure efficient communication in Polish, you may also contact Rosengarten Polska, which handles data subject enquiries in cooperation with the data protection officer, by e-mail at: biuro@rosengarten.pl, by telephone at: +48 613 073 013, via the contact form available on the website, as well as by traditional post to the address Rosengarten Polska sp. z o.o., ul. Garbary 56, 61-758 Poznań.

How do we collect your data?

Some personal data is obtained directly from you, in particular when you provide it via the contact form or other available communication channels. Other data is collected automatically or after you have given your consent while using the website by our IT systems. This concerns, in particular, technical data such as information about your internet browser, operating system or the time of access to the site. This data is collected automatically as soon as you enter the website.

On what basis do we process your data?

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, insofar as special categories of data within the meaning of Article 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your terminal device, data processing also takes place on the basis of Article 399(1) of the Electronic Communications Law. Consent may be withdrawn at any time. If your data is necessary for the performance of a contract or for carrying out pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR. In addition, we process your data if this is necessary for compliance with a legal obligation, on the basis of Article 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The relevant legal bases applicable in each individual case are explained in the following sections of this privacy policy.

For what purpose do we process your data?

Personal data provided to us by you when filling in contact forms, by telephone, by e-mail or via social media is used solely for the purpose of dealing with your enquiry and providing a response. The legal basis for the processing of the data is Article 6(1)(f) GDPR, and if the enquiries concern services provided by us on the basis of a contract binding us – Article 6(1)(b) GDPR.

Some of the data is processed in order to ensure the proper functioning and security of the website. Other data may be used to analyse the way in which the website is used, which makes it possible to optimise it and adapt it to users’ needs. The legal basis for data processing is Article 6(1)(f) GDPR.

If it is possible to conclude contracts or take steps aimed at concluding them via the website, the data you provide will also be processed for the purpose of handling enquiries, preparing offers, processing orders and taking other actions related to the performance of orders.

What rights do you have with regard to your data?

You have the right to information about the purposes, categories, recipients or categories of recipients of the personal data being processed (Article 15 GDPR), as well as the right to rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), the right to object to processing (Article 21 GDPR), and the right to data portability (Article 20 GDPR). The data subject has the right, at any time, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her which is carried out by us on the basis of legitimate interest (Article 6(1)(f) GDPR); this also applies to profiling based on those provisions.

You have the right to lodge a complaint with the data protection supervisory authority.

If you have consented to data processing, you may withdraw that consent at any time with effect for the future.

In the above matters, as well as in the event of any questions relating to the processing of personal data, you may contact us at any time.


Analytics tools and third-party tools

When visiting this website, your browsing behaviour may be analysed statistically. This is done primarily using so-called analytics programmes.

Detailed information on these analytics programmes can be found in the privacy policy below.

Hosting

We host the content of our website with the following providers:

Amazon Web Services

The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter: AWS).

When you visit our website, your personal data is processed on AWS servers. In this context, personal data may also be transferred to AWS’s parent company in the USA. Data transfer to the USA is based on the EU standard contractual clauses. Details can be found here:
https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/

Further information can be found in AWS’s privacy policy:
https://aws.amazon.com/de/privacy/?nc1=f_pr

The use of AWS is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device. Consent may be withdrawn at any time.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5776

Data processing agreement

We have concluded a data processing agreement regarding the use of the above-mentioned service. This is an agreement required by data protection law which ensures that the personal data of visitors to our website is processed only in accordance with our instructions and in compliance with the GDPR.

Hetzner

The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter: Hetzner).

Details can be found in Hetzner’s privacy policy:
https://www.hetzner.com/de/legal/privacy-policy/

The use of Hetzner is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device. Consent may be withdrawn at any time.

Data processing agreement

We have concluded a data processing agreement regarding the use of the above-mentioned service. This is an agreement required by data protection law which ensures that the personal data of visitors to our website is processed only in accordance with our instructions and in compliance with the GDPR.

General information and mandatory information

General information on the legal bases for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, insofar as special categories of data within the meaning of Article 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your terminal device, data processing also takes place on the basis of Article 399(1) of the Electronic Communications Law. Consent may be withdrawn at any time. If your data is necessary for the performance of a contract or for carrying out pre-contractual measures, we process it on the basis of Article 6(1)(b) GDPR. In addition, we process your data if this is necessary for compliance with a legal obligation, on the basis of Article 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The relevant legal bases applicable in each individual case are explained in the following sections of this privacy policy.

Information on the controller

Unless stated otherwise below, Rosengarten Polska spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (61-758), ul. Garbary 56, KRS: 0000692067, NIP: 7872119951, REGON: 36809186500000 (hereinafter: Rosengarten Polska) and Rosengarten GmbH, Devern 13, 49635 Badbergen, Germany, registered in the German commercial register under number HRB 19921 by the Local Court of Osnabrück (hereinafter: Rosengarten Germany, together with Rosengarten Polska “we”, “us”), are joint controllers with regard to the processing of your data on the website www.rosengarten-gwiazdy.pl.

In order to ensure efficient communication in Polish, you may also contact Rosengarten Polska, which handles data subject enquiries in cooperation with the data protection officer, by e-mail at: biuro@rosengarten.pl, by telephone at: +48 613 073 013, via the contact form available on the website, as well as by traditional post to the address Rosengarten Polska sp. z o.o., ul. Garbary 56, 61-758 Poznań.

Data protection officer

Rosengarten Germany has appointed a data protection officer, who can be contacted at the following e-mail address: info@rosengarten-sterne.de

Erik Delfs
Devern 13, 49635 Badbergen
Telephone: (+49) 05433 21180
E-mail: info@rosengarten-sterne.de

Storage period of personal data

The storage period of your personal data depends on the purpose of processing. Below, we indicate the general principles for determining this period. Detailed information concerning the individual purposes of processing can be found in the relevant sections of this privacy policy.

Data processed for the purpose of performing a contract or taking pre-contractual steps (Article 6(1)(b) GDPR) – we store it for the duration of the contract or pre-contractual correspondence, and subsequently for the limitation period for civil-law claims that may arise from the contract, which, as a rule, is 6 years from the end of the calendar year in which the claim became due (Article 118 of the Civil Code), and in the case of claims related to the conduct of business activity or claims for periodic benefits – 3 years.

Data processed on the basis of the controller’s legitimate interest (Article 6(1)(f) GDPR) – we store it until the expiry of the limitation periods for any possible claims (as a rule 3 or 6 years, as indicated above) or until your objection to the processing is upheld (Article 21(1) GDPR), depending on which event occurs first. In the case of processing data for direct marketing purposes – until an objection is raised (Article 21(2) GDPR).

Data processed on the basis of consent (Article 6(1)(a) GDPR or Article 9(2)(a) GDPR) – we store it until consent is withdrawn, which does not affect the lawfulness of processing carried out before its withdrawal.

Recipients of personal data

In the course of our business activities, we cooperate with various external entities. In some cases, it is also necessary to transfer personal data to these external entities. We transfer personal data to external entities only where this is necessary for the performance of a contract, where we are legally obliged to do so (e.g. transfer of data to tax authorities), where we have a legitimate interest in the transfer pursuant to Article 6(1)(f) GDPR, or where another legal basis permits the transfer. When using processors, we transfer our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, an arrangement on joint controllership is concluded.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your express consent. You may withdraw any consent already given at any time. The lawfulness of data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to object to data collection in special cases and to direct marketing (Article 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

The competent supervisory authority in Poland is the President of the Personal Data Protection Office (ul. Stanisława Moniuszki 1A, 00-014 Warsaw, www.uodo.gov.pl)

Right to data portability

You have the right to receive the data which we process by automated means on the basis of your consent or in fulfilment of a contract, in a commonly used, machine-readable format, or to request that it be transferred to you or to a third party. If you request the direct transfer of the data to another controller, this will take place only insofar as it is technically feasible.

Right of access, rectification and erasure

Within the framework of the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin, recipients and the purpose of data processing and, where applicable, a right to rectification or erasure of such data. In this regard, as well as in the event of further questions concerning personal data, you may contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. For this purpose, you may contact us at any time. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
  • If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of erasure.
  • If we no longer need your personal data, but you require it for the establishment, exercise or defence of legal claims, you have the right to request restriction of the processing of your personal data instead of erasure.
  • If you have lodged an objection pursuant to Article 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may – apart from being stored – be processed only with your consent or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

SSL or TLS encryption

For security reasons and in order to protect the transmission of confidential content, such as orders or enquiries which you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser’s address line changes from “http://” to “https://” and by the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Data collection on this website

Cookies

Our website uses so-called “cookies”. Cookies are small data packages and do not cause any damage to your terminal device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g. cookies for processing payment services).

Cookies have different functions. Numerous cookies are technically necessary, as certain website functions would not work without them. Other cookies may be used to analyse user behaviour or for marketing purposes.

Cookies which are required for carrying out the electronic communication process, for providing certain functions requested by the user or for optimising the website (necessary cookies) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of that consent (Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law); consent may be withdrawn at any time.

You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Information about which cookies and services are used on this website can be found in this privacy policy.

Consent with Usercentrics

This website uses Usercentrics technology to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies, and to document this in a manner compliant with data protection law. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website:
https://usercentrics.com/de/ (hereinafter: “Usercentrics”).

When you enter our website, the following personal data is transferred to Usercentrics:

  • Your consent(s) or withdrawal of consent
  • Your IP address
  • Information about your browser
  • Information about your terminal device
  • Time of your visit to the website
  • Geolocation

Usercentrics cookie. Usercentrics stores a cookie in your browser which contains information about the consents you have given or refused (including the consent identifier, date and time, banner version, scope of the selected categories). This cookie is technically necessary for the proper functioning of the consent management mechanism – without it, it would not be possible to remember your choices or respect the refusal of consent. For this reason, the Usercentrics cookie is stored without separate consent on the basis of Article 5(3) of Directive 2002/58/EC (exception for cookies necessary to provide a service requested by the user) in conjunction with Article 399(3)(2) of the Electronic Communications Law.

Cookies storing user preferences regarding consent are stored on the terminal device for up to 12 months or until they are deleted by the user.

Independently of the above, we store information about the consents given (so-called consent logs) in our system for the entire period of data processing on the basis of consent, and subsequently for a period of 3 years from its withdrawal or the end of processing – for the purpose of demonstrating compliance with legal provisions and defending against possible claims.

The use of Usercentrics serves the purpose of obtaining the legally required consents for the use of certain technologies. The legal basis for this is Article 6(1)(c) GDPR.

Data processing agreement

We have concluded a data processing agreement regarding the use of the above-mentioned service. This is an agreement required by data protection law which ensures that the personal data of visitors to our website is processed only in accordance with our instructions and in compliance with the GDPR.

Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass this data on without your consent.

The processing of this data takes place on the basis of Article 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this has been obtained; consent may be withdrawn at any time.

Enquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry, including all personal data arising from it (name and content of the enquiry), will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

The processing of this data takes place on the basis of Article 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this has been obtained; consent may be withdrawn at any time.

Function for creating a Memorial Page

In connection with the creation of a Memorial Page, the Controller processes the following personal data: first name, surname (optional), e-mail address. In addition, you may voluntarily add further personal data to the Memorial Page.

In order to create a Memorial Page, you will receive an e-mail asking you to click on the indicated link, which serves to verify whether you are the owner of the e-mail address provided.

Personal data posted by you on the Memorial Page (with the exception of the e-mail address) is publicly available to all persons visiting the Website.

Personal data made available via the Memorial Page is stored and remains on that page until its content is completely deleted, consent to its publication is withdrawn, or until it has to be removed for legal reasons (e.g. due to content of an offensive nature).

The processing of personal data provided when creating the Memorial Page takes place on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw the consent granted at any time. For this purpose, it is sufficient to send us an e-mail. The provision of personal data in the scope of the first name and e-mail address is voluntary, but necessary in order to create a Memorial Page. Failure to provide this data makes it impossible to use this functionality. The provision of other data (surname, descriptive content, photographs) is voluntary and is not a condition for using the functionality.

Comment function on this website

As part of the comment function on this website – in addition to the comment itself – information about the time it was posted and, if the comment is not posted anonymously, the username chosen by you is also stored.

Comments and the associated data are stored and remain on this website until the commented content is completely deleted, consent to publish the comment is withdrawn, or until the comments have to be removed for legal reasons (e.g. comments of an offensive nature).

The storage of comments takes place on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw the consent granted at any time. For this purpose, it is sufficient to send us an e-mail.

Analytics tools and advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool with the aid of which we can integrate tracking or statistical tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out independent analyses. It serves only to manage and deploy the tools integrated through it. However, Google Tag Manager does record your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the Electronic Communications Law. Consent may be withdrawn at any time.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator thereby receives various usage data, such as page views, time spent on the site, operating systems used and the origin of the user. This data is combined into a user ID and assigned to the respective terminal device of the website visitor.

Furthermore, with Google Analytics we can record, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches in order to supplement the data sets collected and uses machine learning technologies in data analysis.

Google Analytics uses technologies which enable the recognition of the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this service takes place on the basis of your consent pursuant to Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law. Consent may be withdrawn at any time.

Data transfer to the USA is based on the European Commission’s standard contractual clauses. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780

IP anonymisation

IP anonymisation in Google Analytics is active. As a result, your IP address is shortened by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transferred to the USA. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator related to website use and internet use. The IP address transmitted by your browser within the framework of Google Analytics is not merged with other Google data.

Browser plug-in

You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link:
https://google.com/dlpage/gaoptout?hl=pl

More information on how Google Analytics handles user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=pl

Google Signals

We use Google Signals. When you visit our website, Google Analytics records, among other things, your location, search history and YouTube history, as well as demographic data (visitor data). This data may be used by means of Google Signals for personalised advertising. If you have a Google account, the visitor data from Google Signals is linked to your Google account and used for personalised advertising messages. The data is also used to compile anonymised statistics on the behaviour of our users.

Data processing agreement

We have concluded a data processing agreement with Google and fully apply the strict requirements of the data protection authorities when using Google Analytics.

Newsletter

Newsletter

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information which allows us to verify that you are the owner of the e-mail address provided and agree to receive the newsletter. Additional data is not collected or is collected only on a voluntary basis. For the handling of the newsletter, we use newsletter service providers, which are described below.

CleverReach

This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter: “CleverReach”). CleverReach is a service which can be used to organise and analyse newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on CleverReach servers in Germany or Ireland.

Our newsletters sent with CleverReach enable us to analyse the behaviour of newsletter recipients. Among other things, it can be analysed how many recipients have opened the newsletter message and how often a given link in the newsletter was clicked. With the aid of so-called conversion tracking, it can also be analysed whether a previously defined action took place after clicking the link in the newsletter. Further information on data analysis by CleverReach newsletters can be found at:
https://www.cleverreach.com/en/newsletter-tool/newsletter-reporting/

Data processing takes place on the basis of your consent (Article 6(1)(a) GDPR). You may withdraw this consent at any time by unsubscribing from the newsletter. The withdrawal of consent does not affect the lawfulness of processing which took place before the withdrawal.

If you do not want CleverReach to analyse your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message.

The data you provide for the purpose of receiving the newsletter will be stored by us or by the newsletter service provider until you unsubscribe from the newsletter and will then be deleted from the distribution list. Data stored by us for other purposes remains unaffected.

After you unsubscribe from the distribution list, your e-mail address may be stored by us or by the newsletter service provider on a blacklist if this is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) GDPR). Storage on the blacklist continues for the entire period during which we operate the newsletter. You may object to the storage if your interests outweigh our legitimate interest.

Details can be found in CleverReach’s data protection provisions at:
https://www.cleverreach.com/en/privacy-policy/

Data processing agreement

We have concluded a data processing agreement regarding the use of the above-mentioned service. This is an agreement required by data protection law which ensures that the personal data of visitors to our website is processed only in accordance with our instructions and in compliance with the GDPR.

Plugins and tools

YouTube with enhanced privacy mode

This website uses videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of our pages on which YouTube videos are used, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalise browsing on YouTube. Advertisements displayed in enhanced privacy mode are likewise not personalised. No cookies are set in enhanced privacy mode. Instead, however, so-called local storage elements are stored in the user’s browser which, similarly to cookies, may contain personal data and may be used for recognition purposes. Details on enhanced privacy mode can be found here:
https://support.google.com/youtube/answer/171780

After activating a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the Electronic Communications Law. Consent may be withdrawn at any time.

Further information on data protection at YouTube can be found in their privacy policy at:
https://policies.google.com/privacy?hl=pl

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780

Google Fonts

This site uses so-called Google Fonts, which are provided by Google, for the uniform display of fonts. When a page is called up, your browser loads the required fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. In this way, Google obtains knowledge that this website has been accessed via your IP address. The use of Google Fonts is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the Electronic Communications Law. Consent may be withdrawn at any time.

If your browser does not support Google Fonts, a standard font from your computer will be used.

Further information on Google Fonts can be found at
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://policies.google.com/privacy?hl=pl

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780

Adobe Fonts

This website uses Adobe web fonts for the uniform display of certain typefaces. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).

When this website is called up, your browser loads the required fonts directly from Adobe so that they can be displayed correctly on your terminal device. For this purpose, your browser establishes a connection to Adobe’s servers in the USA. In this way, Adobe obtains knowledge that this website has been accessed via your IP address. According to Adobe, no cookies are stored when providing the fonts.

The storage and analysis of the data takes place on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the Electronic Communications Law. Consent may be withdrawn at any time.

Data transfer to the USA is based on the European Commission’s standard contractual clauses. Details can be found here:
https://www.adobe.com/de/privacy/eudatatransfers.html

Further information on Adobe Fonts can be found at:
https://www.adobe.com/de/privacy/policies/adobe-fonts.html

Adobe’s privacy policy can be found at:
https://www.adobe.com/de/privacy/policy.html

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5660

Sentry

We have integrated Sentry on this website. The provider is Functional Software Inc., 45 Fremont Street, 8th Floor, San Francisco, California 94105, USA (hereinafter: Sentry).

Sentry is an open-source error tracking service and enables us to monitor and rectify errors and crashes occurring in various parts of web-based software in real time. For this purpose, we process the following data:

  • Entry number, first name, pet name

We host Sentry locally on our servers, which means that the data is processed by us.

The use of Sentry is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the error-free functioning of its own website.

If appropriate consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Article 399(1) of the Electronic Communications Law, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. for device fingerprinting) within the meaning of the Electronic Communications Law. Consent may be withdrawn at any time.

Further details can be found in the provider’s privacy policy at
https://sentry.io/privacy/

Data transfer to the USA is based on the European Commission’s standard contractual clauses. Details can be found here:
https://sentry.io/legal/dpa/5.0.0/#cross-border-transfer-mechanisms
https://sentry.io/legal/dpa/5.0.0/#third-party

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5869