Data protection
The protection of your personal data is very important to us.
In the following, we would like to inform you that we request personal data and store it electronically. The data is stored and processed by us in compliance with the relevant provisions of national data protection laws, as well as the General Data Protection Regulation (GDPR).
Privacy Policy
The protection of your personal data is very important to us.
In the following, we would like to inform you about the handling of personal data. According to Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as 'General Data Protection Regulation' or 'GDPR' for short), personal data means any information relating to an identified or identifiable natural person. Your data will be stored and processed by us in compliance with the relevant provisions of national data protection laws, as well as the General Data Protection Regulation (GDPR).
The controller for data processing within the meaning of the aforementioned provisions is:
Otmar Graf
Borngasse 7
76835 Weyher
Phone: 06323 - 98
00 64
Fax: 06323 - 98 00 65
E-mail: info@graf-von-weyher.de
The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
You have the following rights against the controller with regard to your personal data. With regard to the conditions for exercising these rights, reference is made to the respective legal basis:
- Right to information according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw granted consent according to Art. 7 para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR
In addition, you have a right to object:
Data subjects have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on Art. 6 para. 1 lit. e or f GDPR.
The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
Where personal data are processed for direct marketing purposes, data subjects shall have the right to object at any time to processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Where data subjects object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, data subjects may exercise their right to object by automated means using technical specifications.
III. Legal basis
If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.
If the processing of personal data is necessary for the performance of contracts concluded with us, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
Insofar as the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and these interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.
The respective storage period for personal data depends on the legal basis, the purpose of processing and, if applicable, relevant statutory retention obligations.
The general rule is:
If data processing is based on consent within the meaning of Art. 6 para. 1 lit. a GDPR, the data will be stored for as long as this consent remains valid.
If data processing is based on Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 para. 1 GDPR, unless compelling legitimate grounds for the processing are demonstrated which override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, personal data will be stored until the data subject exercises their right to object under Art. 21 para. 2 GDPR.
Unless otherwise stated in the following information of this declaration about specific processing situations, personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
1. Processing of personal data when visiting the website
a. Description and scope of data processing
When you access our website (without registration or other contact), the following data (so-called log files) are transmitted by your browser to our servers:
- IP address
- Date and time of the request
- Time zone difference to GMT
- Content of the website
- Access status (HTTP status)
- Amount of data transferred
- Requesting website
- Web browser
- Operating system
- Language and version of the browser
b. Legal basis for data processing
The legal basis for storing data and log files is Art. 6 para. 1 lit. f GDPR.
c. Purpose of data processing
The storage in log files ensures the proper functioning of our website. It also serves to optimize and secure our systems. Data is not evaluated for marketing purposes in this context.
d. Duration of storage
The data we store will be deleted as soon as it is no longer required for the purpose for which it was collected. This is usually the case after the respective session ends.
Further storage is possible. In this case, the IP addresses of the users will be deleted or anonymized so that it is no longer possible to identify the calling client.
e. Right to object and means of removal
The collection of the mentioned data is absolutely necessary for the operation of the website. Consequently, the user has no right to object.
2. Processing of personal data by cookies
a. Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored on the visitor's computer system when they visit our websites. Cookies contain a string of characters that allows the visitor's browser to be identified when they revisit our website.
We use the following types of cookies:
- Transient cookies/session cookies: Deleted after the session ends
- Persistent cookies: Deleted after the specified storage period
- Technically necessary cookies
If cookies are also set on our websites for advertising and/or analysis purposes, we will inform you separately in this declaration.
You can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
If cookies are also set on our websites for advertising and/or analysis purposes, we will inform you separately in this declaration.
b. Legal basis for data processing
The legal basis for the processing of personal data using necessary cookies is Art. 6 para. 1 lit. f GDPR.
c. Purpose of data processing
Technically necessary cookies serve to simplify the use of websites. Some functions of the website or online shop cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change.
The user data collected by technically necessary cookies is not used to create user profiles.
d. Duration of storage, right to object and means of removal
Cookies are stored on the user's computer and transmitted from there. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
3. Contact form and e-mail
If you contact us via the contact form or by e-mail, you agree to e-mail communication that is transport-encrypted but not content-encrypted. Please inform yourself about the associated risks, e.g. here: https://www.bsi-fuer-buerger.de.
a. Description and scope of data processing
We provide visitors to our website with a contact form for quick electronic contact. The data entered in the input mask is transmitted to us and stored.
In addition, the user's IP address, as well as the date and time of transmission, are stored at the time of sending.
Alternatively, contact can be made via the provided e-mail address. In this case, the user's personal data transmitted with the e-mail will be stored.
No data is passed on to third parties. The data is used exclusively for processing the request.
b. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR.
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact aims at the conclusion of a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
c. Purpose of data processing
The processing of personal data serves solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter concerned has been finally clarified.
The personal data additionally collected during the sending process will be deleted after a period of seven days at the latest.
If a business transaction results from the correspondence, we are legally obliged to keep the exchanged correspondence for 6 years (starting from the end of the calendar year in which the respective letter was sent).
e. Right to object and means of removal
The user has the possibility to withdraw their consent to the processing of personal data at any time. For this, the user can contact the controller via the contact options provided on the website. If the user contacts us by e-mail, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.
If the retention of data results from a legal obligation, there is no right to object.
4. Comment function
a. Description and scope of data processing
We offer visitors to our website the opportunity to leave comments. The data entered in the input mask is transmitted to us and stored.
In addition, the user's IP address, as well as the date and time of transmission, are stored at the time of sending.
No data is passed on to third parties. The data is used exclusively for processing the request.
b. Legal basis for data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR.
c. Purpose of data processing
The processing of personal data serves to prevent misuse of the comment function (e.g., by bots) and to ensure the security of our information technology systems.
d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case at the latest when the comment or the corresponding page is deleted.
e. Right to object and possibility of removal
The user has the option to withdraw their consent to the processing of personal data at any time. To do so, the user can contact the controller using the contact options provided on the website.
5. Newsletter
a. Description and scope of data processing
Users have the option to subscribe to our newsletter on our website. When registering for the newsletter, the data requested in the input mask is transmitted to us.
In addition, the following data is collected upon registration:
- IP address of the registering computer
- Date and time of registration
During the registration process, consent is obtained through a so-called double opt-in procedure.
If customers have purchased goods or services from us and have provided their email address, this can subsequently also be used for sending newsletters. In such a case, the newsletter will exclusively send direct advertising for our own similar goods or services.
b. Legal basis for data processing
The legal basis for processing data after newsletter registration by the user, if the user has given consent, is Art. 6 para. 1 lit. a GDPR.
The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.
c. Purpose of data processing
The collection of the user's email address serves to deliver the newsletter.
The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.
d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The user's email address will therefore be stored as long as the newsletter subscription is active.
e. Right to object and possibility of removal
The affected user can unsubscribe from the newsletter at any time. For this purpose, a corresponding link can be found in every newsletter.
6. Newsletter Tracking
a. Description and scope of data processing
The newsletters we send contain tracking pixels. Tracking pixels are miniature graphics embedded in emails sent in HTML format to enable log file recording and analysis. The personal data collected in this way is not passed on to third parties. During the registration process, your consent is obtained through a double opt-in procedure.
b. Legal basis for data processing
The legal basis for processing data after newsletter registration, if the user has given consent, is Art. 6 para. 1 lit. a GDPR.
c. Purpose of data processing
Newsletter tracking serves the statistical evaluation of the success or failure of online marketing campaigns. This allows us to track whether and when an email is opened and which links within the email are clicked. Newsletter tracking also serves to improve and optimize the newsletter.
d. Duration of storage
Your data will be deleted when it is no longer required for our business processes and no legal retention obligations prevent its deletion.
e. Right to object and possibility of removal
The consent of the affected user can be revoked at any time by the user unsubscribing from the newsletter. For this purpose, a corresponding link can be found in every newsletter, for example.
7. Registration during the order process or entry for guest orders
a. Description and scope of data processing
Users have the option to register on our website.
During registration, the data requested in the input mask is transmitted to us and stored. The same applies to entries made during guest orders.
Personal data may be transferred to third parties, such as parcel service providers, if this is necessary for the fulfillment of the contract. These third parties use the data thus passed on exclusively for internal purposes attributable to us. For more details, please refer to Section III of this privacy policy.
b. Legal basis for data processing
Registration and guest orders serve to carry out pre-contractual measures and to fulfill a contract to which the user is a party. Therefore, the legal basis for data processing is Art. 6 para. 1 lit. b GDPR.
c. Purpose of data processing
The user's registration is necessary for the fulfillment of contracts with users or for the implementation of pre-contractual measures. The same applies to the entries made during guest orders.
d. Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.
This is the case for data collected during the registration process when the registration on our website is canceled or changed.
This is the case for data collected during the registration process or guest order process for the fulfillment of a contract or the implementation of pre-contractual measures, when the data is no longer required for the execution of the contract. Even after the conclusion of the contract, it may be necessary to store personal data of the contractual partner to comply with contractual or legal obligations.
We are required by law to retain correspondence exchanged in connection with a contract for 6 years (starting from the end of the calendar year in which the respective letter was sent).
e. Right to object and possibility of removal
Users have the option to cancel their registration at any time. Users can change or have their stored data changed at any time.
Information on how to delete the registration can be obtained from the controller.
If the data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not prevent deletion.
8. Data transfer for contract fulfillment
a. Description and scope of data processing
When placing an order, we collect and use your personal data only to the extent necessary for the fulfillment and processing of your order and for handling your inquiries. The data you enter during the ordering process will be passed on to service partners, if necessary for contract fulfillment or if you have authorized it, who we require for the processing of the contractual relationship or service providers we use for order processing.
In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients from the following categories:
Shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers, and dropshipping merchants.
b. Legal basis for data processing
The processing described above serves the fulfillment of a contract to which the user is a party. The legal basis for the processing of data is Art. 6 para. 1 lit. b GDPR.
c. Purpose of data processing
The transfer serves to fulfill our contractual obligations.
d. Duration of storage
Your data will be deleted when it is no longer required for the performance of the contract, unless contractual or legal retention obligations prevent its deletion.
e. Right to object and possibility of removal
The user has the option to revoke the given consent at any time to the controller or the provider.
If the data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible if contractual or legal obligations do not prevent deletion.
9. Payment Service Providers
a. Description and scope of data processing
If a user selects a payment service provider for payment processing during the order process, data of the user required to carry out the payment will be automatically transmitted to this provider. This includes, for example, the name and address, bank details such as account numbers or credit card numbers, passwords, TANs and checksums, as well as contractual, sum-related and recipient-related information. In this case, the controller does not receive any account or credit card related information, but only the information whether the payment process was successful. Under certain circumstances, the data may be transmitted by the payment service provider to credit agencies for identity and credit checks. In this respect, reference is made to the terms and conditions and privacy notices of the payment service provider, which can be viewed on their websites.
If you need to be registered with the payment service provider you have chosen to use it, you will be redirected to their pages during the payment process. In this case, the provider collects the data themselves. The privacy policy of the respective payment service provider applies in this respect.
The payment service providers offered by the controller and further information about them can be found in the payment information.
b. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR (processing for the implementation of pre-contractual measures and fulfillment of a contract).
c. Purpose of data processing
The transmission of data to the selected payment service provider serves the fulfillment of a contract to which the user is a party, in particular for payment processing, fraud prevention, and identity and credit checks.
d. Duration of storage
Your data will be deleted when it is no longer required for our business processes and no legal retention obligations prevent its deletion. We have no influence on the storage of data by the payment service provider, please contact the payment service provider you have chosen directly, who is the "controller" within the meaning of data protection regulations in this respect.
e. Right to object and possibility of removal
You have the rights mentioned in this privacy policy under "III. Rights of the Data Subjects", which can be asserted against the respective controller.
10. Data transfer for credit checks
a. Description and scope of data processing
In cases permitted by law, data for credit checks may be transmitted to credit agencies as part of payment processing. Recipients of the data may include the following companies:
- Schufa, SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden https://www.schufa.de/de/datenschutz/
- Arvato Bertelsmann, Bertelsmann SE & Co. KGaA, Carl-Bertelsmann-Straße 270, 33311 Gütersloh, https://finance.arvato.com/de/ueber-arvato/datenschutz.html
- Infoscore Forderungsmanagement GmbH, Gütersloher Str. 123, 33415 Verl, https://www.inkassoportal.de/rechtliches/datenschutz
- Creditreform, Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss, https://www.creditreform.de/eu-dsgvo.html
- Bürgel, CRIF Bürgel GmbH, Radlkoferstraße 2, 81373 Munich, https://www.crifbuergel.de/sites/default/files/documents/informationsblatt_dsgvo.pdf
b. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR.
c. Purpose of data processing
The transfer takes place for fraud prevention, as well as for identity and credit checks.
d. Duration of storage
Your data will be deleted when it is no longer required for our business processes and no legal retention obligations prevent its deletion. We have no influence on the storage of data by the provider. You can reach the provider using the contact details provided above.
e. Right to object and possibility of removal
The user has the option to revoke the given consent to the provider or the controller at any time. A revocation of data that is absolutely necessary for payment processing is not possible.
11. Mailchimp
a. Description and scope of data processing
We use the newsletter service MailChimp for sending newsletters and email marketing. The provider is Rocket Science Group, LLC, 675 Ponce de Leon Ave NE #5000, Atlanta GA 30308. USA.
The provider's servers are located in the USA.
The following data, for example, is stored and processed by the provider.
- IP address
- Page views and click behavior
- Browser type and browser language
- Hardware used by the user
In addition, the provider sets cookies on the users' end devices.
We point out that MailChimp has committed to comply with EU data protection regulations. A contract for commissioned data processing (Data Processing Addendum: https://mailchimp.com/legal/data-processing-addendum/) has been concluded with MailChimp, in which MailChimp commits to protecting the transmitted data. In this respect, we also refer to the currently valid privacy policy of MailChimp (available at: https://mailchimp.com/legal/privacy/).
b. Legal basis for data processing
The legal basis for processing data after newsletter registration by the user, if the user has given consent, is Art. 6 para. 1 lit. a GDPR.
c. Purpose of data processing
The aforementioned data processing provides us with information that enables us to analyze user behavior. This allows us to optimize our newsletters and improve their display.
d. Duration of storage
Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations preventing deletion. We have no influence on the storage of data by the provider. You can reach the provider using the contact details mentioned above.
e. Right to object and erasure options
Users may withdraw their consent to the processing of personal data at any time from the controller or the provider. To do this, the user must contact the controller or the provider via the communication channels provided. The user can also arrange for the deletion of data by the provider.
In addition, users have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
12. Google Analytics
a. Description and scope of data processing
This website uses the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses analysis cookies. The information generated by the cookies about your use of this website is usually transmitted to a Google server in the USA and stored there. We extend the Google Analytics code with the code “gat._anonymizeIp();”. This code ensures that your IP address, which is logged by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area, is truncated before transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. Further information can be found at https://www.google.com/analytics/terms/de.html or at https://policies.google.com/?hl=de.
b. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) (a) GDPR.
c. Purpose of data processing
The processing of users' personal data enables us to analyze our users' surfing behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to improve our website and its user-friendliness. By anonymizing the IP address, the users' interest in protecting their personal data is sufficiently taken into account.
d. Storage duration
Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations preventing deletion.
We have also specified that Google automatically deletes the data after 14/26/38/50 months.
e. Right to object and erasure options
Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=de.
To opt out when using mobile devices, the following link <a href=“javascript:gaOptout()“>Deactivate Google Analytics</a> must be clicked from each mobile device.
13. Google reCaptcha
a. Description and scope of data processing
This website uses the reCaptcha service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When clicking on the reCaptcha service, data is transferred to Google's servers. These servers may also be located in the USA.
This includes, for example, the number of mouse clicks the user has made on the website, which Google cookies are stored on the user's device, as well as the language settings, the date of the access and the IP address. Information on the storage duration can be found at https://www.google.com/intl/de/policies/privacy/ and at https://policies.google.com/?hl=de.
b. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) (a) GDPR.
c. Purpose of data processing
The service is used to prevent abuse of the input options on our website by automated or machine inputs, by distinguishing such inputs from those of a natural person (spam and bot protection).
d. Storage duration
Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations preventing deletion. We have no influence on the storage of data by the provider. You can reach the provider using the contact details mentioned above.
e. Right to object and erasure options
Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
13. Google Adsense
a. Description and scope of data processing
This website uses the web advertising service Google Adsense. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analysis cookies are used here. Google Adsense also uses so-called "web beacons" (small invisible graphics) to collect information. Through the use of the web beacon, simple actions such as visitor traffic on the website can be recorded and collected. The information generated by the cookies and/or web beacon about your use of this website (including the IP address) is transmitted to a Google server in the USA and stored there. Google will use this information to evaluate your use of the website in terms of advertisements, to compile reports on website activity and advertisements for website operators, and to provide other services related to website use and internet use. Google may also transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will under no circumstances associate your IP address with other Google data.
b. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 (1) (a) GDPR.
c. Purpose of data processing
The processing of users' personal data enables us to analyze our users' surfing behavior regarding the integration and display of advertisements on our website. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website, including the advertisements displayed there. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, the users' interest in protecting their personal data is sufficiently taken into account.
d. Storage duration
Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations preventing deletion. We have no influence on the storage of data by the provider. You can reach the provider using the contact details mentioned above.
e. Right to object and erasure options
Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
You can also deactivate the display of personalized advertising via the following link https://support.google.com/ads/answer/2662922?hl=de.
14. Google Remarketing
a. Description and scope of data processing
This website uses the Google Remarketing service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This service enables us to display user-related and interest-relevant advertising to our visitors. For this purpose, cookies are used that enable recognition of the visitor to our website when they subsequently visit websites that are also members of the Google advertising network. Google receives personal data about the visitor, such as their IP address or browsing behavior. Google uses the data thus obtained to display the advertising.
b. Legal basis for data processing
The legal basis is Art. 6 (1) (a) GDPR.
c. Purpose of data processing
The use of analysis cookies serves to optimize the advertising displayed to the user.
d. Storage duration
Your data will be deleted when it is no longer required for our business processes and there are no legal retention obligations preventing deletion. We have no influence on the storage of data by the provider. You can reach the provider using the contact details mentioned above.
e. Right to object and erasure options
Cookies are stored on the user's computer and transmitted by it. Therefore, users also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.
Furthermore, the data subject has the option to object to interest-based advertising by Google. To do this, the data subject must access the link www.google.de/settings/ads from each internet browser they use and make the desired settings there.
Further information and Google's applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.
15. Two-click solution for integrating social media plugins
The website does not directly integrate social media plugins into the website. This excludes the creation of profiles by third parties.
However, to share our offers via Pinterest, Instagram, Facebook, Twitter, XING or Google+, for example, we use the so-called two-click solution.
Only when you decide to share a post via the corresponding button and click on it, is data transmitted to the operator of the respective social media service.
We recommend that you read the privacy policy of the respective social media service you wish to use beforehand, so that you are informed about the purpose and scope of data collection and the further processing and use of the data, as well as your rights and setting options for protecting your privacy.
You can find these here:
Facebook: https://www.facebook.com/about/privacy/
twitter: https://twitter.com/privacy
Xing: https://www.xing.com/privacy
Instagram: https://www.instagram.com/about/legal/privacy/
Pinterest: https://about.pinterest.com/privacy-policy
If you access the external content of these providers, you consent, in accordance with Art. 49 (1) sentence 1 lit. a GDPR, that your data will be processed in the USA, whose level of data protection is considered inadequate by the European Court of Justice. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes without recourse to legal remedies.
The legal basis, after consent, is Art. 6 (1) (a) GDPR.
16. Two-click solution for integrating YouTube
We have integrated YouTube components into our website. YouTube is an internet video portal that allows video publishers to upload video clips free of charge and other users to view, rate, and comment on them, also free of charge. YouTube allows the publication of all types of videos, which means that complete film and television programs, as well as music videos, trailers, or user-created videos can be accessed via the internet portal.
The service on YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The website does not directly embed YouTube videos into the website. This excludes the creation of profiles by third parties.
To watch our videos, users must first click on the thumbnail. Only after consent or logging in can the video be watched. Data is only transferred at this moment.
Further information on this can be found at http://www.youtube.com/t/privacy_guidelines and in the YouTube privacy policy published at https://www.google.de/intl/de/policies/privacy/. These provide information about the collection, processing and use of personal data by Google.
If you access the external content of these providers, you consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR, that your data will be processed in the USA, whose level of data protection is considered insufficient by the European Court of Justice. There is particular risk that your data may be processed by US authorities for control and monitoring purposes without any legal remedies.
The legal basis, after consent, is Art. 6 para. 1 lit. a GDPR.
17. Google Fonts
a. Description and scope of data processing
This website uses external fonts, so-called Google Fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When the website is called up, the font files are loaded from the Google Inc. server. These servers may also be located in the USA. For example, it is transmitted which pages the user has called up and what IP address the user's device has.
Further information can be found at https://developers.google.com/fonts/faq?hl=de-DE&csw= and at https://policies.google.com/?hl=de.
b. Legal basis for data processing
The legal basis for the processing of users' personal data is Art. 6 para. 1 lit. a GDPR.
c. Purpose of data processing
The use of Google Fonts improves and optimizes the presentation and display of the website.
d. Duration of storage
We have no influence on the storage of data by the provider. You can reach the provider using the contact details mentioned above.
e. Right to object and erasure
We are not aware of any possibilities for objection or erasure.
18. Google Maps
a. Description and scope of data processing
We have integrated map material from Google Maps on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
By using Google Maps, information about the use of the website (click behavior, including your IP address) can be transmitted to the provider. This data can be transferred to a server of the provider in the USA and stored there.
Further information can be found at https://policies.google.com/privacy?hl=de.
b. Legal basis for data processing
The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.
c. Purpose of data processing
We embed the provider's map material to display our location and to improve discoverability.
d. Duration of storage
We have no influence on the storage of data by the provider. You can reach the provider using the contact details mentioned above.
e. Right to object and erasure
The user can prevent the transmission of data to the provider by deactivating JavaScript.
19. Uptain
To improve interaction with our visitors, we use a Java-Script plugin from uptain GmbH ("uptain plugin" https://www.uptain.de). This allows us to analyze your use of the website and improve customer communication (e.g., through a dialog box). For this purpose, we collect information about your user behavior, i.e., cursor movement, dwell time, clicked links, and any information provided. The legal basis for processing is our legitimate interest in direct marketing and the provision of our website (Art. 6 para. 1 lit f GDPR). uptain GmbH is strictly bound by our instructions as a processor. The collected information will not be passed on to third parties unless we are legally obliged to do so. Insofar as the information collected by the uptain plugin contains personal data, it will be deleted immediately after your visit to our website.
You can deactivate the use of the uptain plugin at any time via the following link: https://www.graf-von-weyher.de/datenschutz?__up_tracking_unsubscribe