PRIVACY POLICY - SUNKID GMBH

I. General information

According to the law personal data must be processed lawfully, in good faith and in a manner comprehensible for the data subject (“lawfulness, fairness and transparency”). With this Privacy Policy we, Sunkid GmbH, inform you about what and how much information we gather about you when you read and use our website and what we do with the information we gather within the framework of our (general) business operations. With this Privacy Policy we also inform you about your rights.

As a private law company, we are subject to the rules of the European Data Protection Regulation (General Data Protection Regulation [EU] 679/2016, GDPR) and the rules of the Austrian Data Protection Act (Datenschutzgesetz, DSG). We give high priority to preserving the confidentiality of the personal data you make available and to protecting such data against unauthorized access. We take utmost care and apply state-of-the-art security standards to ensure maximum protection for your personal data.

This Privacy Policy describes:

what information we gather and for what purposes,
how we use that information, and
what your rights are.

Definitions of the individual terms used in this Privacy Policy can be found in Art. 4 GDPR.

1) CONTROLLER ACCORDING TO ART. 24 GDPR

Sunkid GmbH

FN 154738 g

Industriezone 39

6460 Imst

+43 5412 68131

[email protected]

2) LEGAL BASIS OF PROCESSING

We process your personal data only if at least one of the following applies:

You have given consent to the processing of your personal data
Processing is necessary for the performance of a contract to which you are party
Processing is necessary for compliance with a legal obligation
To protect vital interests

3) HOW DO WE PROTECT YOUR PERSONAL DATA?

To ensure the security of your personal data we have taken a series of technical and organizational measures as defined by Art. 32 GDPR. Personal data are stored on secure networks and are only accessible to a limited number of specifically authorized persons who are bound by an obligation of confidentiality in regard of those data. Despite these measures, whenever you provide personal information on the Internet, there is always a risk that it may be intercepted and used by third parties whom we are unable to control. Although we make every effort to protect your personal information and privacy, we are unable to guarantee the security of any information you make available on the Internet.

Encryption of many of our services using SSL
User authentication
Secure network infrastructures
Limited access to personal data
Network monitoring solutions
Code of conduct for employees
Data confidentiality obligation

II. Data processing by Sunkid GmbH

1) PURPOSE OF PROCESSING, LEGAL GROUNDS AND CONTROLLER RIGHTS

We as Controller process your personal data primarily in the framework of a business relationship with you and/or a company represented by you, particularly where a contractual relationship exists or in order to take steps at your request prior to entering into a contract (Art. 6 para 1 lit b GDPR). The personal data processed by us include your name, your contact data (email address, telephone number, residential address) and your account data, in certain circumstances information on your credit history, your social security data, if necessary, information exchanged between us, our data processors and you in records, documents and correspondence in connection with the performance of the contract.

Your personal data are also processed to the extent it is necessary for compliance with a legal/regulatory obligation to which we are subject (e.g. record-keeping requirements, accounting, employer’s obligation to report to the social insurance institution etc.; Art. 6 para 1 lit c GDPR) or where the processing is necessary for the performance of a task carried out in the public interest (Art. 6 para 1 lit e GDPR). Processing includes in particular business correspondence and any fiscally relevant records relating to the contractual relationship between you and us (§ 212 UGB (Commercial Code), § 132 BAO (Federal Tax Act) and others), as well as social security data, if an employer/employee relationship exists between you and us.

The processing of your personal data is also carried out on the basis of your consent to the processing; you may revoke your given consent at any time (Art. 6 para 1 lit a GDPR). We process those personal data for which you have given consent.

We also process personal information where it is necessary and reasonable for the purposes of the legitimate interests pursued by us as the controller (Art. 6 para 1 lit f GDPR), particularly to safeguard our corporate interests, to assert or exercise or defend legal claims and, if there is no reason to assume that you have an overriding legitimate interest that your data are not passed on, to avoid physical injury or financial losses, for direct advertising (marketing and information measures, particularly relating to services we offer), IT security and technical administration and for records as well as customer and supplier management purposes. The processing includes all the data processed in the framework of the contractual relationship, to the extent it is necessary to achieve the respective purpose.

Moreover, we reserve the right to transmit your personal data in case we sell or transfer all or parts of our company or our assets (also in case of restructuring, dissolution or liquidation).

CHILDREN

Our offer is generally aimed at adults. Persons under the age of 18 should not send us any personal data without the consent of their parents or legal guardians.

EVENTS

Pictures are taken at various events, especially workshops organized by us, or when persons give lectures in our premises.

In invitations and at events it is pointed out in advance that photographs will be taken. Where small groups are photographed at events, the photographer is instructed to obtain consent. Where photographs are taken at events with large groups, the pictures are used to heighten our profile and promote our image. We publish such pictures on the Internet and in printed form (legitimate interest).

Where photographs of a small group are taken, the photographer will ask before taking the photograph whether you agree to the processing, and you may choose to step aside and not be in the picture. According to Art. 7 para 3 GDPR you have the right to withdraw your consent at any time; such withdrawal shall be applicable from that moment onwards.

2) (POTENTIAL) RECIPIENTS OF PERSONAL DATA

The categories of recipients as defined by Art. 13 para 1 lit e GDPR are:

Companies to which Sunkid GmbH is affiliated under corporate law, i.e.
Data processors engaged by us as controllers (see Article I.1.), i.e. suppliers, IT and back office service providers [IDC EDV Handels- und Dienstleistungs-GmbH, 2getmore GmbH, The Rocket Science Group LLC, HOST Software Entwicklung & Consulting GmbH], tax advisers and payroll accountants [Illmer und Partner Steuerberatungsgesellschaft mbH], auditors [NEXIA TU Wirtschaftsprüfung GmbH];
Courts (especially in case of customer and supplier disputes) and authorities (tax offices etc.) as well as our opponents in court or regulatory proceedings;
(court-appointed and non-judicial) experts;
Third-party suppliers and cooperation partners (credit card providers, banks, substitutes, law firms);
Lawyers and law firms retained by us for investigations and/or consulting on legal issues.

We use your personal data exclusively for the purposes described above and do not trade in your personal data or sell them or pass them on to third parties without informing you in advance and only in accordance with the personal information legislation currently in effect.

3) STORAGE AND RETENTION OF PERSONAL DATA

Under current law we are required according to Art. 5 para 1 lit e GDPR to erase the personal data relating to you as a data subject when the purpose for which the personal data have been processed no longer exists and there is no longer a legal basis for keeping your personal data.

Your personal data will be stored by us in any event for as long as it is necessary to achieve the respective purpose, particularly for the duration of the complete business relationship (from initiation or pre-contractual relations to implementation and completion of the contract) and in compliance with the legal obligations contained in statutory record-keeping and documentation provisions (e.g. the 7-year retention period for contracts and other documents and the accompanying correspondence according to UGB, BAO, UStG (Value-Added Tax Act), etc.). The data will be stored until the applicable guarantee or warranty or limitation periods for the assertion, exercise or defense of legal claims expire (in this case until a legal dispute where the data are needed as evidence is resolved), taking into account the statutory limitation periods according to ABGB (General Civil Code), which may lead to retention periods, for the required documents, of up to 30 years after the termination of the contractual relationship.

The data of applicants whom we do not employ are deleted seven months after the completion of the application procedure, unless consent to keeping the data on file was granted. Upon employment the applicant data will be stored until the contractual relationship ends or beyond that date where the aforementioned purposes apply. Where consent was granted (especially in case of electronic messages) the data will be stored until the applicant revokes his or her consent, which can be done at any time; the revocation does not affect the processing up until the date of revocation.

4) RIGHTS OF THE DATA SUBJECT

According to the GDPR you have the following rights apart from the exceptions described in the relevant provisions and the restrictions set forth in Art. 23 GDPR:

a) RIGHT TO INFORMATION (ARTICLE 15 GDPR)

You have the right to obtain at any time from us as controller (Sunkid GmbH; see Article I.1.) confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, obtain free information about the personal data concerning you and a copy of that information. If this right to access is invoked unduly by seeking information in an excessive way, we may charge a customary fee for the administrative costs of providing such information.

b) RIGHT TO RECTIFICATION (ARTICLE 16 GDPR)

You have the right to obtain from us (as controller) without undue delay the rectification of inaccurate personal data concerning you.

c) RIGHT TO ERASURE (RIGHT TO BE FORGOTTEN) (ARTICLE 17 GDPR)

You have the right to obtain from us (as controller) the erasure of the personal data concerning you without undue delay, provided that the data are no longer required for the purposes for which they were collected or processed and no law specifies otherwise. If you apply for the erasure of your data, we shall check the aforementioned statutory requirements and inform you about the result of such evaluation.

d) RIGHT TO RESTRICTION OF PROCESSING (ARTICLE 18 GDPR)

You have the right to obtain from us (as controller) restriction of processing of personal data concerning you.

e) RIGHT TO DATA PORTABILITY (ARTICLE 20 GDPR)

You have the right to receive the personal data concerning you which you have made available to us (as controller) in a structured, commonly used and machine-readable format and the right to transmit without hindrance from us those data to another controller to whom you have provided your personal data.

f) RIGHT TO OBJECT (ARTICLE 21 GDPR)

If we process personal data based on a public interest and/or in the exercise of official authority or on grounds of a legitimate interest, you have the right to object, on grounds of your particular situation, at any time to the processing of the personal data concerning you. If that is the case, we shall no longer process your data unless compelling legitimate grounds for processing exist.

g) RIGHT TO WITHDRAW CONSENT (ARTICLE 7 PARA 3 GDPR)

You have the right to withdraw your consent to data processing at any time. The withdrawal of consent does not affect the lawfulness of any previous processing based on your consent before its withdrawal.

h) RIGHT NOT TO BE SUBJECT TO A DECISION BASED SOLELY ON AUTOMATED PROCESSING

Under certain circumstances, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

i) RIGHT TO LODGE A COMPLAINT AND RIGHT TO EFFECTIVE JUDICIAL REMEDY (ARTICLE 77 et seq. GDPR)

If you consider that the processing of personal data relating to you infringes any data protection rules or your rights relating to data privacy in any other way, you have the right to lodge a complaint with a supervisory authority. In Austria: Datenschutzbehörde, Wickenburggasse 8, 1080 Wien.

Without prejudice to any other administrative or non-judicial remedy and your right to object, you have the right to an effective judicial remedy against a legally binding decision of a supervisory authority concerning you.

j) HOW TO EXERCISE YOUR RIGHTS

If you have any question with regard to data protection and/or if you want to exercise any of your aforementioned rights, please contact us as controller as follows (see also Article I.1.):

by email to: [email protected] *

by mail to: Sunkid GmbH, Industriezone 39, 6460 Imst*

* Please attach a copy of your identity document. We cannot manage a request filed by you as data subject without successfully establishing your identity. Therefore, we request your support in the identification process.

5) RIGHT TO OBJECT AND DIRECT MARKETING

Where personal data as defined by Art. 21 para 2 GDPR are processed for direct marketing purposes, you shall have the right to object at any time to the processing of the personal data concerning you. The same applies also to profiling, where it is linked to such direct marketing purposes.

If you file such an objection, the personal data processed will no longer be processed for direct marketing purposes in the future.

6) OBLIGATION TO PROVIDE PERSONAL DATA

When the law or a contract obliges you to provide the personal data described in Article II.1. (as explained there) or when such personal data are necessary to be able to enter into a contract, you are obliged to provide such data, and failure to provide them may lead to refusal of a business relationship.

7) INFORMATION TO BE PROVIDED WHERE PERSONAL DATA HAVE NOT BEEN OBTAINED FROM THE DATA SUBJECT (ARTICLE 14 GDPR)

In some cases we, as controller, gather personal data not from you but from other sources; information is gathered only from publicly accessible data banks, from customers/suppliers, from credit reference agencies or companies to which we are affiliated under corporate law:

Commercial register data from different offices authorized by the Federal Ministry of Constitutional Affairs, Reforms, Deregulation and Justice BMVRDJ, such as lexunited, IMD etc.; land register information from a court, notary public or the Internet; relevant trade data from the Federal Trades Information System GISA;
Credit history information, including payment behavior (queries at associations for the protection of creditors such as KSV, AKV, ÖVC, ISA);
Insolvency data (particularly from the Federal Edicts Archive);
Registration data from the relevant registration authorities (municipal office, city administration in the case of statutory cities and/or Magistratisches Bezirksamt in Vienna);
Information on you from search engines, social networks, various websites;
Information concerning contact details, payment behavior, business relationships through customers/suppliers or their business partners, if you are our opponent in a legal procedure.

The data gathered by us from these sources and stored by us are exclusively contact data (email address, telephone number, postal address), any information on your function and position/responsibility in the company as well as your career; information about your career and education and training as well as any data in contractual documents and the related documents may be gathered from public sources as well.

We process these data for the purposes of our overriding legitimate interests in terms of efficient communication for business purposes and also proper applicant management (Art. 6 para 1 lit f GDPR). The data processed by us in that way are stored for the periods mentioned in Article II.3.

As to personal data gathered from third parties, you have the same rights vis-à-vis us as controller as described in Article II.4.

8) TRANSFER OF DATA TO OTHER COUNTRIES

We may transfer your personal data also to countries other than the country in which the information was originally collected. The data protection legislation in those countries may differ from that applicable in the country where you originally provided the personal data. If we transfer your personal data to other countries, we shall protect those data as described in our Privacy Policy, and such transfers shall be subject to the applicable law.

The countries to which we transfer your personal data are located

within the European Union or
outside the European Union.

When we transfer personal data from the European Union to a third country or an international organization outside the European Union, the transfer is based on the following conditions:

an adequacy decision adopted by the European Commission
in the absence of such a decision other legal grounds, such as the existence of a binding and enforceable document entered into by the relevant authorities or public sector entities, binding internal corporate rules, standard data protection clauses and approved or certified codes of conduct.

In specific situations a data transfer may also take place on the basis of Art. 49 GDPR:

Art. 49 para 1 lit a GDPR:

You have explicitly consented to the proposed transfer, after having been informed of the possible risks of such a transfer for you due to the absence of an adequacy decision and appropriate safeguards.

Art. 49 para 1 lit b GDPR:

The transfer is necessary for the performance of a contract between you and us or the implementation of pre-contractual measures taken at your request.

Art. 49 para 1 lit c GDPR:

The transfer is necessary for the conclusion or performance of a contract concluded in your interest between us and another natural or legal person.

If a service provider or contract partner is based outside the European Economic Area (EEA), we shall inform you about the consequences of that fact in each case.

III. Processing of website user data by Sunkid GmbH

1) PURPOSE OF DATA PROCESSING; LEGAL GROUNDS AND RIGHTS OF THE CONTROLLER

The purposes of data processing in the context of usage of our website are: production of user statistics, functionality of the website, optimization of our offers and services provided by the website, answering inquiries, order processing and registration on the website, maintaining and evaluating system security and stability, and administrative purposes ; moreover, data processing may be necessary in order to comply with a legal obligation (Art. 6 para 1 lit c GDPR). The collected data are in no case used to draw conclusions about you as a user.

When you access this website, the browser of your terminal automatically transmits information to the server of our website. The information is temporarily stored in a so-called log file. The automatically produced file contains the browser type, the browser version, the language and version of the browser software and, as the case may be, the operating system of your terminal as well as the name of the access provider, the model name of your mobile phone and a generic device identifier, the operating system used and its surface, the website from which you access our website (reference URL), the website you are visiting and its requirements, date and time of your visit including the time difference to Greenwich Mean Time (GMT), the access status/HTTP status code, the IP address of your terminal, the name, the URL of the retrieved file and the amount of data transferred each time as well as the information you made available by filling in forms on the website.

When you contact us by email or via a contact form, the data you provide (your email address, your name, your address and your telephone number) will be stored by us so we can answer your questions. The data that become available in this context will be deleted by us when they are no longer needed; where statutory retention periods apply, processing will be restricted.

In all other respects the purposes set forth in Article II.1. shall apply.

2) (POTENTIAL) RECIPIENTS OF PERSONAL DATA

We may engage data processors for the processing of personal data (please refer to Article II.2). The processor may process personal data only subject to the instructions and for the purposes defined by us.

Other potential recipients as defined by Art. 13 para 1 lit f GDPR are:

Companies to which Sunkid GmbH is affiliated under corporate law, namely ZoWo Holding GmbH (FN 460440 v), Bruckschlögl Gesellschaft m.b.H. (FN 104926 d), Braso Technik GmbH (FN 503507 b), Sunkid France Sarl (France), Borer Lift AG (Switzerland), and Star Lifts USA Inc. (USA).
External data processors/service providers (who are bound to our instructions) for web presence optimization, maintenance operations and analysis, sales, special offers and raffles, contracts etc. [IDC EDV Handels- and Dienstleistungs-GmbH, 2getmore GmbH, The Rocket Science Group LLC, Alphabet Inc.].
Courts (especially in case of customer and supplier disputes) and authorities (tax authorities etc.) as well as our opponents in court or regulatory proceedings
(court-appointed and non-judicial) experts
Third-party suppliers and cooperation partners (credit card suppliers, banks, substitutes, law firms)
Lawyers and law firms retained by us for investigations and/or consulting on legal issues

We use your personal data exclusively for the purposes described above and shall not trade in your personal data or sell or pass them on to third parties without informing you in advance in accordance with the data protection law currently in effect.

We reserve the right to transfer the personal information we collected from you, if we sell or transfer all or parts of our company or our assets (including in case of restructuring, dissolution or liquidation).

3) STORAGE AND RETENTION OF PERSONAL DATA

Please refer to Article II.3.

4) RIGHTS OF DATA SUBJECTS OR USERS

Please refer to Article II.4.

5) RIGHT TO OBJECT AND DIRECT MARKETING

Please refer to Article II.5.

6) OBLIGATION TO PROVIDE PERSONAL DATA

Please refer to Article II.6.

7) INFORMATION TO BE PROVIDED WHERE PERSONAL DATA HAVE NOT BEEN OBTAINED FROM THE DATA SUBJECT (USER) (ARTICLE 14 GDPR)

Please refer to Article II.7.

8) DATA TRANSFERS TO OTHER COUNTRIES

Please refer to Article II.8.

9) TOOLS USED WHEN YOU VISIT THE WEBSITE

In addition to the aforementioned data, information is collected and stored on your terminal when you use our website. This information is called “cookies”. Cookies are small (text) files that are placed on your computer or your digital terminal while you are visiting our website, storing information specifically relating to you.

Our website uses or places cookies in accordance with EU and Austrian legislation (Art. 5 para 3 ePrivacy Directive and § 96 para 3 TKG (Telecommunications Act) 2003). Cookies cannot be used to run programs or load any viruses on your computer. Their main purpose is to provide us with data on frequency of use and number of website users and to generally enhance the user-friendliness and effectiveness of the website.

This website uses the following types of cookies, whose scope and function is explained below:

Transient cookies (see point a.)

Persistent cookies (see point b.)

Transient cookies remain in the browser only for the duration of the session and disappear automatically when you close your browser. This type includes particularly the session cookies, which store a so-called session ID, an identifier used to assign various related inquiries of your browser to a session. They allow your browser to be recognized when you revisit our website. The session cookies are erased upon logout or when you close your browser.
Persistent cookies are automatically erased on a set expiration date, which may vary according to the cookie. You may delete the cookies at any time in the security settings of your browser.

You may change your browser settings according to your wishes and e.g. disable third-party cookies or all cookies. Third-party cookies are cookies placed by a third party i.e. not by the website you are currently visiting. Please note, however, that if you disable cookies you may not be able to use the full functionality of this website.

When using and/or placing cookies that contain personal information or impact your privacy, we will expressly request your consent in advance. This requires active behavior on your part, i.e. that you continue to browse after being informed of the purposes of the cookies and the cookie banners on the website, thus granting cookie consent.

How to delete and block cookies

The most popular web browsers provide functions that allow you to prevent cookies from getting generally stored and/or third-party cookies (e.g. advertising partners) from getting stored on your computer and to delete existing cookies at any time, limit cookies to specific websites or to change your browser’s settings so as to be notified of any cookies. The links of the browser manufacturers below provide information and instructions on cookie management:

Internet Explorer version 7 or higher >>

Google Chrome >>

Mozilla Firefox >>

Opera >>

Apple Safari >>

Please bear in mind that disabling cookies may have an impact on your use of the website.

A complete overview of the cookies used, including the names, description and the storage period, is provided in the cookie settings of our website.

Third-party cookies

Third-party cookies (including Google) are also used for advertising on the basis of previous visits to the website. Advertising partners do not collect any personal information such as names, email addresses, postal addresses or telephone numbers. As website user you can deactivate the use of cookies by Google by accessing the settings relating to personalized ads on non-Google websites and deactivating this function. You can also deactivate third-party cookies by navigating to the website of the "Network Advertising Initiative" (http://www.networkadvertising.org/choices/) and http://www.youronlinechoices.com/ and selecting the respective opt-out settings. These settings ensure that no interest-based advertising is displayed, without generally preventing advertising from being displayed.

GOOGLE ANALYTICS

This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter: “Google”). Google Analytics uses cookies, which are text files placed on the user’s computer and allow the website operator to analyze how users use the site. The information generated by the cookie about your use of this website is generally transmitted to and stored by Google on servers in the USA.

If IP anonymization is activated on this website, Google will truncate your IP address before transmission within Member States of the European Union and the states that are Contracting Parties of the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On our behalf Google will use this information to evaluate your website usage, compile website activity reports and provide the website operator with other services related to the website and Internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser; please note, however, that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing a browser plugin by clicking the link http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin or in browsers used on mobile devices, please click on the following link to set an opt-out cookie preventing the future collection of your data by Google Analytics when you visit this website (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must re-click this link): <>

Please note that this website uses Google Analytics with the extension “anonymizeIP”, and therefore IP addresses are truncated prior to processing to preclude the possibility of direct personalized tracking.

WEB FONTS

To achieve a correct and appealing cross-browser representation of our contents close to the external fonts used by us, we use Google Fonts (https://www.google.com/webfonts/) on this website. Google Fonts is a web service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google”). These web fonts are integrated into the website by downloading them from a server, usually a Google server in the USA. The server obtains information on which of our websites you have visited. Google also stores the IP address of the browser of your terminal in the Internet if you visit our website. If your browser does not support or allow access to Google Fonts, content will be displayed in a standard font.

The use of script libraries or font libraries automatically triggers a connection to the library operator. Theoretically – although it is currently unclear whether and for what purposes – the operators of such libraries could collect data.

The privacy policy of the library operator Google is available at https://www.google.com/policies/privacy/.

Google is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

For more information about data processing by Google please refer to the Google privacy policy: https://www.google.com/policies/privacy/; www.google.com/fonts#AboutPlace:about.

In the Google Safety Center you can also adjust the privacy settings so that they are right for you. Possibility to object – opt-out: https://adssettings.google.com/authenticated

GOOGLE MAPS

This website uses the Google Maps API provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google”) to enable us to visualize geographic information. When you use Google Maps, data on visitor use of the map functions are also collected, processed and used by Google. By using the website, you agree to the automatically recorded data being collected, processed and used by Google.

Google is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

If you do not want your data to be processed in this way, you can deactivate the “Google Maps” service and thus prevent the transmission of data to Google by disabling the javascript function in your browser. Please note, however, that if you do this, you will not be able to use the “Google Maps” component or its full functionality.

For more information about data processing by Google, please refer to the Google privacy policy: https://www.google.com/policies/privacy/. In the Google Safety Center you can also adjust the privacy settings so that they are right for you. Possibility to object – opt-out: https://adssettings.google.com/authenticated.

Detailed instructions on the management of your own data in connection with Google products are available at https://about.google/intl/de/products/.

The conditions of use of Google Maps are available at “Google Maps Terms of Service”.

GOOGLE RECAPTCHA

To keep your data secure when you place orders online we use the reCAPTCHA service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”); <https://www.google.com/recaptcha/>. The service employs a query to establish whether entries are made by a human or fraudulently by automated machine processing. The query includes transmission of the IP address to Google and may include further data Google needs to operate the reCAPTCHA service. Your data input is transmitted to Google for further use. By using reCAPTCHA you agree to Google using your identification input for digitizing purposes. If IP anonymization is activated on this website, Google will truncate your IP address before transmission within Member States of the European Union or other states that are Contracting Parties of the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyze your use of the website. The IP address sent by your browser in the context of the reCAPTCHA service is not merged with other data held by Google. These data are subject to Google’s data policy.

Google is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

Detailed instructions on the management of your own data in connection with Google products are available at https://about.google/intl/de/products/.

FACEBOOK

We use, on the basis of legitimate interests (i.e. our interests in analyzing, optimizing and operating our online offer) pursuant to Art. 6 para 1 lit f GDPR, social plugins (“plugins”) of the social network facebook.com, operated by Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) (hereinafter “Facebook”). The plugins can be interaction elements or represent contents (e.g. videos, graphic works or texts) and are identified by one of the Facebook logos (white “f” on blue tile, “Like”, or a “thumbs-up” sign) or labeled “Facebook Social Plugin”. An overview of the Facebook Plugins and what they look like is available at: https://developers.facebook.com/docs/plugins.

To enhance the security of your data during your visit to our website the plugins are integrated into the site via so-called “2Click” or “Shariff” solutions. This integration ensures that no connection to the Facebook servers is established when you visit a page of our website which contains such plugins. Only if you activate the plugins and thus agree to the data transmission will your browser establish a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the site. Then the plugin transmits data (including your IP address) to Facebook. We have no influence on the scope of the data recorded by Facebook via the plugins. As far as we are aware Facebook receives the information that you are currently visiting our website or visited it before. Through the integration of the plugin Facebook also receives the information that your browser opened the corresponding page of our website, if you do not have a Facebook profile or are not logged on at the moment. This information (including your IP address) is directly transmitted from your browser to a Facebook server in the USA and stored there. When you use interaction plugins, e.g. when you click the Like button, this information will also be transmitted directly to a Facebook server and stored there. The information is moreover published on Facebook and shown to your contacts there.

Facebook is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Information on the purpose and scope of data collection and the further processing and use of the data by Facebook as well as your rights in this respect and how you can change settings to protect your privacy is available in the Facebook privacy policy at http://www.facebook.com/policy.php.

If you are a member of the social network of Facebook and want to limit the collection of data with reference to our website and the merger of your user’s data Facebook stores about you, you should log out of Facebook and delete your cookies before visiting our website. You can completely prevent the Facebook plugins from loading in the future by using add-ons for your browser, e.g. the script blocker “NoScript” (http://noscript.net/).

Changes to settings and objections to the use of data for advertising purposes can be made in the Facebook settings: https://www.facebook.com/settings?tab=ads or via the US-based website http://www.aboutads.info/choices/ or the EU-based site http://www.youronlinechoices.com/. The changes to the settings are platform-independent and take effect on all devices, e.g. desktop computer or mobile devices.

INSTAGRAM

We use certain functions of the Social Media network Instagram provided by the company Instagram LLC (1601 Willow Rd, Menlo Park CA 94025, USA; hereinafter “Instagram”) on our website.

The functions for embedding Instagram contents (embed function) allow us to show photos and videos.

When you visit sites that use such functions, data (IP address, browser data, date, time, cookies) are transmitted to Instagram and stored and evaluated there. Facebook, the owner of Instagram, is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

If you have an Instagram account and if you are logged in, these data are allocated to your personal account and the data stored in the account.

The data policy on what information is collected by Instagram and how it is used is available at https://help.instagram.com/519522125107875.

YOUTUBE VIDEOS

We embed YouTube videos into our website. The operator of the relevant plugin is YouTube, LLC (901 Cherry Ave., San Bruno, CA 94066, USA; hereinafter “YouTube”).

When you visit a web page with the YouTube plugin, you are connected to YouTube’s servers and YouTube receives information on the sites you are visiting. If you are logged into your YouTube account, you enable YouTube to directly allocate your surfing behavior to your personal profile. You can prevent this tracing by logging out of your YouTube account and deleting cookies first.

Google, the owner of YouTube, is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI).

When you start a YouTube video, the provider uses cookies that collect data on your user behavior. If you have disabled cookies for the Google Ad program, no cookies will be set when you watch YouTube videos. However, YouTube stores non-personal user data in other cookies. If you want to prevent this, you must disable cookies in your browser.

More information on data protection with regard to YouTube is available in the provider’s data policy at https://www.google.de/intl/de/policies/privacy/, possibility to object – opt-out: https://adssettings.google.com/authenticated; settings for advertising inserts: https://adssettings.google.com/authenticated.

VIMEO VIDEOS

We embed Vimeo videos into our website. The operator of the relevant plugin is Vimeo LLC (555 West 18th Street, New York 10011, USA; hereinafter “Vimeo”).

When you visit a web page with the Vimeo plugin, you will be connected to Vimeo’s servers and Vimeo receives information on the sites you are visiting. If you are logged into your Vimeo account, you enable Vimeo to directly allocate your surfing behavior to your personal profile. You can prevent this tracking of your activities by logging out of your Vimeo account and deleting cookies first.

Vimeo is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt00000008V77AAE&status=Active).

When you start a Vimeo video, the provider will set cookies that collect data on your user behavior. You may change your browser’s settings to delete cookies that have already been set and to reject new cookies. If you are a registered user from the EU, you can opt out of non-essential cookies by taking the steps described at https://vimeo.com/cookie_policy. Vimeo stores non-personal user information in other cookies as well, however. If you want to prevent this, you must disable cookies in your browser.

More information on data protection with regard to Vimeo is available in the provider’s data policy at https://vimeo.com/privacy.

We use plugins of the social network LinkedIn operated by the LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA; hereinafter “LinkedIn”). The LinkedIn plugins are identified by the LinkedIn logo displayed on our website.

When you visit one of our web pages, the plugin establishes a direct connection between your browser and LinkedIn’s server, and LinkedIn receives the information that you have visited our website including your IP address.

LinkedIn is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

When you are logged into your LinkedIn account and click the LinkedIn Recommend button, you can create a link to the contents of our website on your LinkedIn profile. This enables LinkedIn to allocate the visit on our website to your user account.

Please note that as a website operator we know neither the content of the data transmitted to LinkedIn nor how LinkedIn uses this data.

For more information (purpose, scope, further processing, use) and your rights and setting options please refer to LinkedIn’s data policy at http://www.linkedin.com/static?key=privacy_policy&trk=hb_ft_priv/; possibility to object – opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

10) NEWSLETTER

You can subscribe to our newsletter via our website. Please provide your first name, family name, email address and your consent to receiving the newsletter and the aforementioned personal data concerning you being processed for the purpose of informing you about offers, product innovations, raffles etc. according to Art. 6 para 1 lit a, b and f GDPR.

To provide you with targeted information we will also collect and process data you provide voluntarily, such as your area of interest, birthday and zip code, etc.

We may transmit your personal data to processors, who will process them on our behalf strictly subject to the instructions and for the purposes defined by us.

You have the right to withdraw your granted consent in accordance with Art. 7 para 3 GDPR at any time. The withdrawal of consent does not affect the lawfulness of any previous processing carried out based on consent before its withdrawal. Also, you may cancel the subscription to any newsletter/mailing by clicking Unsubscribe.

When you withdraw your consent in accordance with Art. 7 para 3 GDPR, your personal data will be blocked or erased in a routine procedure and in compliance with the legal regulations, unless a statutory regulation provides for anything to the contrary and/or we have overriding legitimate interests in their continued use.

For the transmission of our newsletters we use the newsletter tool MailChimp. MailChimp is a service operated by The Rocket Science Group, LLC (512 Means Street, Ste 404 Atlanta, GA 30318). The data that are stored when you sign up for our newsletter (title, first name, family name, email address, IP address as well as the date and time of your sign-up) are transmitted to a server of The Rocket Science Group, LLC in the USA and stored there in compliance with the EU-US Privacy Shield. The information is processed on the basis of your consent in accordance with Art. 6 para 1 lit a GDPR and/or our legitimate interest according to Art. 6 para 1 lit f GDPR.

MailChimp offers comprehensive possibilities to analyze how newsletters are opened and used. These analyses are group-focused and will not be used for individual evaluation by us. Moreover, MailChimp uses the analysis tool Google Analytics and integrates it into the newsletter. For more details on Google Analytics, please refer to the chapter “Google Analytics”. More information on MailChimp and its data policy is available at http://mailchimp.com/legal/privacy/.

MailChimp is certified under the Privacy Shield thus ensuring compliance with the European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG).

For subscribing to our newsletter, we use a double opt-in subscription system: after subscribing the user receives the opt-in confirmation email with a link to confirm subscription. You can unsubscribe from our newsletter at any time by clicking >>

Once you cancel your subscription, we shall erase your data connected to the newsletter transmission without undue delay.

Sunkid GmbH, 29 April 2020