Privacy

A. Who is responsible for data processing?
The party responsible for data processing on this website within the meaning of Article 4 (7) of the EU General Data Protection Regulation ("GDPR") is:

KREATIZE® GmbH
Dessauer Straße 28-29
10963 Berlin, Germany

Telefon: +49 (0) 7071 14310 70
E-Mail: info@kreatize.com

Executive Directors: Simon Tüchelmann, Daniel A. Garcia Rodriguez, Thomas Hoffmeister

Commercial register Nr. HRB 195200 B (Amtsgericht Charlottenburg)

 

B. Data Protection Administrator - Your first point of contact

Our data protection administrator is available to you as a contact for all data protection-related concerns as well as for the exercise of your existing rights towards us.

You can reach our data protection administrator at:

ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer

Große Bleichen 21, 20354 Hamburg
datenschutz@kreatize.com

 

C. What personal data do we collect when you visit the website?

1. Log file collection

You can visit our website without informing us who you are. For technical reasons, however, we collect so-called log files from you. These are data that are transmitted from your browser to our server.

We process this data to ensure the functionality, stability and security of the website.

The processing is based on Art. 6 para. 1 p. 1 lit. f GDPR.

In detail, this involves the following data:

- IP address
- Operating system and its interface
- Location-related information
- Date and time of your visit
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Browser
- Language and version of the browser software

2. Usage of cookies

We also use cookies on our website. A cookie is a small data record that is automatically downloaded and stored on your PC or mobile device. It contains data such as personal page settings and login information. These cookies enable us to analyse the usage behaviour of website visitors (e.g. which pages are frequently accessed). You can find out which cookies we use for which purposes in the document "Cookie information" (see below).

3. Google Analytics

We use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses cookies. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f GDPR.

We use Google Analytics with the extension "anonymizeIp()". This means that IP addresses are processed in abbreviated form, which means that personal references can be ruled out. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.

We use Google Analytics for aggregated, anonymized website traffic analysis. In order to track your session usage, Google drops a cookie (_ga) with a randomly-generated ClientID in your browser. This ID is anonymized and contains no identifiable information like email, phone number, name, etc. We also send Google your IP Address. We use GA to track aggregated website behavior, such as what pages you looked at, for how long, and so on. This information is important to us for improving the user experience and determining site effectiveness.

For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout or by deactivating it via the following link:

[Deactivate Google Analytics]

Third party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

User terms: http://www.google.com/analytics/terms/de.html, Privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html , as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

 

D. Use email newsletter

You can subscribe to an e-mail newsletter ("Newsletter") on our website. To subscribe to our newsletter, you must provide us with your email address. We then store your e-mail address until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter.

The indication of your name is voluntary and will be used by us to address you personally.

Legal basis is Art. 6 para. 1 p. 1 lit. a GDPR.

You can revoke your consent and unsubscribe from the newsletter at any time. You can declare the revocation by clicking on the link provided in every newsletter e-mail, by e-mail to datenschutz@kreatize.com or by sending a message to the contact details given in the imprint.

E. Contact us by e-mail or via the contact form

You can contact us by e-mail or via the contact form on the website. In order for us to respond to your inquiry, we need your email address. You can also voluntarily provide us with additional contact information (e.g. your name or your telephone number if you would like us to call you back). To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

The legal basis is Art. 6 para. 1 p. 1 lit. f of the GDPR.

F. Contact via chat tool

You can also contact us via our chat tool on the website. In order to process your request, we process the data that you voluntarily provide to us in this context (e.g. your name or your telephone number if you would like us to call you back). To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.

G. Social Media

We operate various social media profiles in order to provide information on the respective social media platforms and to be able to contact you. Please note that cookies may be stored in your browser by the respective platform operator, in which your usage behavior is stored for market research and advertising purposes. These usage profiles can also be created across devices. The platform operators evaluate these usage profiles in order to display personalized advertising to you. The data processing may also affect persons who are not registered as users with the respective social media platform.

We receive information from the platform operator about visits to our social media profile. This may also involve personal data. The processing of your personal data when visiting one of our social media profiles is based on our legitimate interests in a diverse external presentation of our company and the use of an effective information opportunity and communication with you.

The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.

If you have given a platform operator consent to data processing, the legal basis is Art. 6 (1) lit. a GDPR.
You can find more information about data processing on social media platforms and about objection options towards the platform operator here:

YouTube
Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy policy: https://policies.google.com/privacy
Opt-Out: https://adssettings.google.com/authenticated

Twitter

Provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Privacy policy: https://twitter.com/de/privacy
Opt-Out: https://twitter.com/personalization

LinkedIn

Provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing

Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutschland)
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung

H. Request for quotations, execution of your order

When you request a quotation from us, order parts or use other services from us, we process personal data that you provide to us as part of our business relationship.

In detail, this involves the following data:

- Name
- Telephone number
- E-mail address
- Employer

We need this data to be able to process the contract you conclude with us. In addition, we transmit your data to external manufacturing companies, insofar as this is necessary for the processing of your inquiry or the execution of your order. With the transfer of the data, these themselves become the data controller within the meaning of the GDPR.

The legal basis for our processing of the data is Art. 6 para. 1 p. 1 lit. b GDPR, insofar as you yourself become a contractual partner or intend to do so.

If you do not become a contractual partner yourself, we will process your data on the basis of Art. 6 (1) p. 1 lit. f GDPR.

I. Children

Our online offers are aimed at adults. Persons under 16 years of age may not transmit any personal data to us without the consent of their parents or legal guardians.

J. To whom is personal data transferred?

1. External service providers

In the context of the above-mentioned data processing, we use external analysis, CRM, communication and cloud service providers. These service providers have committed themselves under a contract for commissioned processing (Art. 28 GDPR) to comply with appropriate technical and organizational measures for data security, among other things, and act on our behalf in accordance with instructions.

2. Manufacturing Company

In addition, we transfer your data to external manufacturing companies to the extent necessary to process your inquiry or fulfill your order.

K. Is personal data transferred to a third country?

In some cases, our external service providers also use affiliated companies that are based outside the member states of the European Union or other contracting states to the Agreement on the European Economic Area ("third country") to fulfill the above-mentioned purposes. If data is transferred to a third country, we ensure that an appropriate level of data protection is maintained - for example, through the participation of the companies in the EU-US Privacy Shield.

L. How long will your personal data be stored?

We store your personal data only until the purpose for which we collected or received it has been fulfilled.
We delete the personal data processed by log files after 14 days. We delete the personal data processed by cookies after 14 months.
If you have provided us with your data via the contact form, we delete this data as soon as it is no longer necessary for us or we restrict the processing if there are legal retention obligations.
If you have subscribed to the e-mail newsletter, we will only process your data until you have unsubscribed. However, for the duration of the statutory limitation periods, we store data on the granting of your consent and on the granting of revocation for the purpose of preserving evidence.
If you make use of our services, we delete your personal data as soon as the order has been completed and any warranty periods have expired.

M. Are you obliged to provide us with your personal data?

No, you are not obliged to provide us with your personal data. However, if you do not provide us with the required data when contacting us or ordering an e-mail newsletter, we will not be able to contact you or send you an e-mail newsletter.

N. Does automated decision making (including profiling) take place?

No, you will not be subject to any decision which produces legal effects concerning you or similarly significantly affects you, based solely on automated data processing (Art. 22 GDPR).

O. Your rights

You may assert your following rights against us at any time free of charge at datenschutz@kreatize.com:

Right to information: You have the right to obtain information from us about the processing of your personal data.

Right of rectification: You have the right to request that we correct any inaccurate or incomplete personal data concerning you.

Right to erasure: You have the right to request the erasure of your data if the conditions set out in Art. 17 GDPR are met. According to this, you can, for example, demand the deletion of your data if it is no longer necessary for the purposes for which it was collected. In addition, you can demand deletion if we process your data on the basis of your consent and you revoke this consent.

Right to restriction of processing: You have the right to request the restriction of the processing of your data if the conditions of Art. 18 GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can then demand the restriction of processing for the duration of the verification of the accuracy of the data.

Right to data portability: If the data processing is based on consent or the fulfillment of a contract and this is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to transfer it to another data processor.

Right of withdrawal: If the data processing is based on consent, you have the right to withdraw this consent with effect for the future at any time free of charge at datenschutz@kreatize.de or by sending a message to the contact details given in the imprint.

Right of complaint: You also have the right to complain to a supervisory authority about our processing of your data.

Right to object: If the processing is based on an overriding legitimate interest of KREATIZE® GmbH or a third party (Art. 6 para. 1 lit. f GDPR), you have the right to object to the processing of your data. You may also object to processing in cases where processing is necessary for the performance of a task which is either in the public interest or in the exercise of official authority (Art. 6 (1) (e) GDPR). In case of objection, we ask you to inform us of your reasons for objecting to the data processing.

Right to object to the processing of data for advertising purposes: In addition, you have the right to object at any time to the processing of data for direct marketing purposes. This also applies to profiling, insofar as it is related to direct advertising.