Notes on data protection
We (KREATIZE® GmbH) are pleased that you have decided to use the KREATIZE website. In the following, we would like to inform you about the processing of your personal data.
A. Who is responsible for data processing?
The party responsible for data processing on this website within the meaning of Article 4 (7) of the EU General Data Protection Regulation ("GDPR") is:
Dessauer Straße 28-29
10963 Berlin, Germany
Telefon: +49 (0) 7071 14310 70
Executive Directors: Simon Tüchelmann, Daniel A. Garcia Rodriguez, Thomas Hoffmeister
Commercial register Nr. HRB 195200 B (Amtsgericht Charlottenburg)
B. Data Protection Administrator - Your first point of contact
Our data protection administrator is available to you as a contact for all data protection-related concerns as well as for the exercise of your existing rights towards us.
You can reach our data protection administrator at:
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg
C. What personal data do we collect when you visit the website?
- Log file collection
You can visit our website without informing us who you are. For technical reasons, however, we collect so-called log files from you. These are data that are transmitted from your browser to our server.
We process this data to ensure the functionality, stability and security of the website.
The processing is based on Art. 6 para. 1 p. 1 lit. f GDPR.
In detail, this involves the following data:
- IP address
- Operating system and its interface
- Location-related information
- Date and time of your visit
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Language and version of the browser software
- Usage of cookies
- Google Analytics
We use Google Analytics with the extension "anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.
We use Google Analytics for aggregated, anonymized website traffic analysis. In order to track your session usage, Google drops a cookie (_ga) with a randomly-generated ClientID in your browser. This ID is anonymized and contains no identifiable information like email, phone number, name, etc. We also send Google your IP Address. We use GA to track aggregated website behavior, such as what pages you looked at, for how long, and so on. This information is important to us for improving the user experience and determining site effectiveness.
For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout or by deactivating it via the following link:
Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
D. Use email newsletter
You can subscribe to an e-mail newsletter ("Newsletter") on our website. To subscribe to our newsletter, you must provide us with your email address. We then store your e-mail address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter.
The indication of your name is voluntary and will be used by us to address you personally.
Legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.
You can revoke your consent and unsubscribe from the newsletter at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to firstname.lastname@example.org or by sending a message to the contact details given in the imprint.
E. Contact us by e-mail or via the contact form
You can contact us by e-mail or via the contact form on the website. In order for us to respond to your inquiry, we need your email address. You can also voluntarily provide us with additional contact information (e.g. your name or your telephone number if you would like us to call you back). To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
The legal basis is Art. 6 para. 1 p. 1 lit. f of the GDPR.
F. Contact via chat tool
You can also contact us via our chat tool on the website. In order to process your request, we process the data that you voluntarily provide to us in this context (e.g. your name or your telephone number if you would like us to call you back). To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.
G. Social Media
We operate various social media profiles in order to provide information on the respective social media platforms and to be able to contact you. Please note that cookies may be stored in your browser by the respective platform operator, in which your usage behavior is stored for market research and advertising purposes. These usage profiles can also be created across devices. The platform operators evaluate these usage profiles in order to display personalized advertising to you. The data processing may also affect persons who are not registered as users with the respective social media platform.
We receive information from the platform operator about visits to our social media profile. This may also involve personal data. The processing of your personal data when visiting one of our social media profiles is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information opportunity and communication with you.
The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.
If you have given a platform operator consent to data processing, the legal basis is Art. 6 (1) lit. a GDPR.
You can find more information about data processing on social media platforms and about objection options towards the platform operator here:
Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland
H. Request for quotations, execution of your order
When you request a quotation from us, order parts or use other services from us, we process personal data that you provide to us as part of our business relationship.
In detail, this involves the following data:
- Telephone number
- E-mail address
We need this data to be able to process the contract you conclude with us. In addition, we transmit your data to external manufacturing companies, insofar as this is necessary for the processing of your inquiry or the execution of your order. With the transfer of the data, these themselves become the data controller within the meaning of the GDPR.
The legal basis for our processing of the data is Art. 6 para. 1 p. 1 lit. b GDPR, insofar as you yourself become a contractual partner or intend to do so.
If you do not become a contractual partner yourself, we will process your data on the basis of Art. 6 (1) p. 1 lit. f GDPR.
Our online offers are aimed at adults. Persons under 16 years of age may not transmit any personal data to us without the consent of their parents or legal guardians.
J. To whom is personal data transferred?
- External service providers
In the context of the above-mentioned data processing, we use external analysis, CRM, communication and cloud service providers. These service providers have committed themselves under a contract for commissioned processing (Art. 28 GDPR) to comply with appropriate technical and organizational measures for data security, among other things, and act on our behalf in accordance with instructions.
- Manufacturing Company
In addition, we transfer your data to external manufacturing companies to the extent necessary to process your inquiry or fulfill your order.
K. Is personal data transferred to a third country?
In some cases, our external service providers also use affiliated companies that are based outside the member states of the European Union or other contracting states to the Agreement on the European Economic Area ("third country") to fulfill the above-mentioned purposes. If data is transferred to a third country, we ensure that an appropriate level of data protection is maintained - for example, through the participation of the companies in the EU-US Privacy Shield.
L. How long will your personal data be stored?
We store your personal data only until the purpose for which we collected or received it has been fulfilled.
We delete the personal data processed by log files after 14 days. We delete the personal data processed by cookies after 14 months.
If you have provided us with your data via the contact form, we delete this data as soon as it is no longer necessary for us or we restrict the processing if there are legal retention obligations.
If you have subscribed to the e-mail newsletter, we will only process your data until you have unsubscribed. However, for the duration of the statutory limitation periods, we store data on the granting of your consent and on the granting of revocation for the purpose of preserving evidence.
If you make use of our services, we delete your personal data as soon as the order has been completed and any warranty periods have expired.
M. Are you obliged to provide us with your personal data?
No, you are not obliged to provide us with your personal data. However, if you do not provide us with the required data when contacting us or ordering an e-mail newsletter, we will not be able to contact you or send you an e-mail newsletter.
N. Does automated decision making (including profiling) take place?
No, you will not be subject to any decision which produces legal effects concerning you or similarly significantly affects you, based solely on automated data processing (Art. 22 GDPR).
O. Your rights
You may assert your following rights against us at any time free of charge at email@example.com:
Right to information: You have the right to obtain information from us about the processing of your personal data.
Right of rectification: You have the right to request that we correct any inaccurate or incomplete personal data concerning you.
Right to erasure: You have the right to request the erasure of your data if the conditions set out in Art. 17 GDPR are met. According to this, you can, for example, demand the deletion of your data if it is no longer necessary for the purposes for which it was collected. In addition, you can demand deletion if we process your data on the basis of your consent and you revoke this consent.
Right to restriction of processing: You have the right to request the restriction of the processing of your data if the conditions of Art. 18 GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can then demand the restriction of processing for the duration of the verification of the accuracy of the data.
Right to data portability: If the data processing is based on consent or the fulfillment of a contract and this is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to transfer it to another data processor.
Right of withdrawal: If the data processing is based on consent, you have the right to withdraw this consent with effect for the future at any time free of charge at firstname.lastname@example.org or by sending a message to the contact details given in the imprint.
Right of complaint: You also have the right to complain to a supervisory authority about our processing of your data.
Right to object: If the processing is based on an overriding legitimate interest of KREATIZE® GmbH or a third party (Art. 6 para. 1 lit. f GDPR), you have the right to object to the processing of your data. You may also object to processing in cases where processing is necessary for the performance of a task which is either in the public interest or in the exercise of official authority (Art. 6 (1) (e) GDPR). In case of objection, we ask you to inform us of your reasons for objecting to the data processing.
Right to object to the processing of data for advertising purposes: In addition, you have the right to object at any time to the processing of data for direct marketing purposes. This also applies to profiling, insofar as it is related to direct advertising.
Our website uses the following types of cookies, the functionality and purposes of which are explained below:
- Session cookies (for this 1.)
- Permanent or protocol cookies (see 2.)
- Third-party cookies (dazu 3.)
- Flash cookies (dazu 4.)
The most common types of cookies are explained below for your understanding:
While you are active on a website, a session cookie is temporarily stored in the memory of your computer, in which a session identifier is saved. This means, for example, that you do not have to log in again each time you change pages. Session cookies are deleted when you log out or your session has automatically expired.
2. Permanent or protocol cookies
A persistent cookie (also called a protocol cookie) is deleted after a specified time, which may differ depending on the cookie. Through these cookies, websites remember your information and settings on your next visit. This results in faster and more convenient access, as you do not have to set your language preferences for our portal again, for example.
3. Third-party cookies
Third-party cookies come from providers other than the website operator. For example, they may be used to collect information for advertising, custom content, and web statistics.
Flash cookies are stored on your computer if the website you are visiting uses Adobe Flash elements. Flash cookies are not captured by your browser, but by your Flash plug-in. Flash cookies do not have an automatic expiration date. If you do not want Flash cookies to be processed, you must install an appropriate add-on, such as Better Privacy for Mozilla Firefox or the Adobe Flash Killer Cookie for Google Chrome.
5. Change tracking settings
In order to make your visit to our website attractive and to enable the use of certain functions, we record your user behavior. You can disable this tracking web analytics at any time by clicking on the link and changing the settings. If you use multiple devices or browsers, you would need to make the change again on each of your devices or browsers.
- Deactivate tracking
- Re-enable tracking
Here you can change your cookie settings: