DATA PROTECTION DECLARATION

GENERAL INFORMATION

As being responsible for this website, we take the protection of your personal data very seriously. We treat your personal data confidentiality in particular in accordance with the statutory data protection regulations.

By using this website, various personal data is collected. Personal data is data that you can be personally identified with. This data protection declaration describes which data we collect and for what we use it. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Responsible for the Website:

SinnerSchrader Commerce| SinnerSchrader Group
Schäferkampsallee 16
D-20357 Hamburg
Germany

Managing Board:

Dr. Ralf Kordsmeier, Thomas Dyckhoff

Responsible for Data Protection:

SinnerSchrader Commerce| SinnerSchrader Group
Data Protection Officer
Schäferkampsallee 16
D-20357 Hamburg
Germany

datenschutz-commerce@sinnerschrader.com

 

VISITING OUR WEBSITE

By visiting our website we process certain data of our visitors. What kind of data, on which legal basis, for what purpose and for how long we process, please read our subsequent data privacy policy.

 

PROVIDING OUR WEBSITE

By loading our webpage, some data is being stored in a web server protocol file:

  • Date and time of the request for the load of the web page

  • size of the data package being transmitted within the connection

  • Type and version of the used browser as well as your IP address

  • For smartphones, tablets and other mobile devices, if applicable, manufacturer/type designation

Furthermore, we store the following information:

  • HTTP Method

  • Host name

  • URI of the request

  • HTTP Response Code

  • Referrer

  • User-Agent

  • Edge Result, Edge Request-ID

  • Host Header, HTTP-Protocol, Time to first byte, x-forward header, SSL-Protocol and SSL cypher, Protocol version, FLE-Status, FLE encrypted fields.

The legal base for the processing of your IP address is Art. 6, para. 1, lit. f) GDPR. Our legitimate interest to store this data is based on the following purposes:

  • ensure a seamless connection establishment

  • ensure the smooth usage of our website / application

  • technical analysis of the system security and stability

Your IP address is generally not stored, we especially do not use it for analysing personal data. A full storage of the IP address would only happen so that we can track technical errors or hacker attacks. Our web servers are configured in a way that your IP address is deleted in a timely manner after your visit of our site.

 

AMAZON WEB SERVICES (AWS)

AWS is a subsidiary of Amazon.com, Inc. or its affiliates (“Amazon.com”).

Amazon Web Services is a cloud service provider. Here we host and operate our website. Within the setup of our website, we made sure to not track any information about you in the web server logfiles. Nevertheless, for loading our website, some personal data needs to be gained to allow the technical processing of your request, e.g. your IP address. Legal basis for using AWS on our website is the privacy shield framework (https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active). We may process your personal data until our legitimate interest ceases to exist.

For more details of AWS's privacy and security processes, please visithttps://aws.amazon.com/de/privacy/ and https://policies.google.com/privacy?hl=en.

 

RIGHTS ACCORDING TO LEGAL DATA PROTECTION REGULATIONS

You have the right to request information, correction, deletion or blocking of your personal data. As far as you should request deletion of your personal data stored by us, we will execute your request without undue delay, unless legal duties for documentation or storage apply. You can object to the usage of your personal data for advertising or market research purposes or revoke given opt-ins at any time.

In case we process personal data of you, you are so called "affected" within the meaning of the General Data Protection Regulation (GDPR) and you have the following rights vis-à-vis the controller:

  • Right to information according to Art. 15 GDPR

You have the right to get information for free about your personal data stored by us at any time. Furthermore, you have the right to have your data provided to us transferred to yourself or a third party at any time.

  • Right to correct any information that is inaccurate or incomplete according to Art. 16 GDPR

  • Right to Deletion according to Art. 17 GDPR

  • Right to limitation of processing according to Art. 18 GDPR

At your request, we will correct, block or delete the personal data stored about you, provided that other statutory regulations (e.g. obligations to store data from the German Commercial Code) do not prevent this.

  • Right to data transferability according to Art. 20 GDPR

You have the right to get information about your personal data for free in a structured, current and readable format

  • Right of contradiction/revocation of permission according to Art. 21 GDPR

If you have given us your consent to process your personal data,  you can revoke this at any time

  • Right of complaint to the national supervisory authority according to Art. 13 para. 2 lit. d) GDPR

Without prejudice to any other administrative or judicial remedy, you have the right of appeal to a supervisory authority, in particular in the Member State where you reside, work or suspect of infringement, if you believe that the processing of personal data concerning you is contrary to the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy according to Art. 78 GDPR.

In order to process your request (please mail: datenschutz-commerce@sinnerschrader.com) we are obliged to check your identity carefully. Please understand that we reserve the right - depending on the criticality of the data - to request further information or proof of identity. This serves in particular to protect your personal data from unauthorized access by third parties. We would like to point out that we reserve the right not to process requests that are received inappropriately frequently or without corresponding proof of identity. We will inform you of this in writing (via E-Mail).

 

CHILDREN

Persons under 16 should not send us personal data without the consent of their parents or persons with parental power. We ask for no personal data from children and adolescents, nor do we collect such information nor pass it on to third parties.

 

USE OF COOKIES

Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not cause any damage to your computer and do not contain any viruses. Most of the cookies we use are so-called "session cookies", which are automatically deleted at the end of your visit to our website. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser the next time you visit our website

In your browser settings, you can determine whether you want to be informed merely about the setting of a cookie, whether you want to grant or exclude permission either for individual cases or for cookies in general, or whether you want cookies to be automatically deleted when your browser is closed. Disabling cookies may limit the functionality of this website.

Cookies, which are necessary for the execution of the electronic communication process or for the provision of certain functions desired by you, are stored on the basis of Art. 6 Abs. 1 lit. f) GDPR. The website operator has a legitimate interest in the storage of cookies for technically error-free and optimized provision of his services. If other cookies (e.g. cookies for analyzing your surfing behavior) are stored, they are handled separately under the analysis service used.

Most of the cookies we use are deleted from your hard disk after the end of the browser session (so-called session cookies). Other cookies remain on your computer and enable us to recognize your computer on the basis of the logged data (visit to our website including date and time, browser type, operating system, products that you have viewed on our website) on your next visit (so-called ID cookies).

The user profiles made possible by this so-called retargeting technology are created in accordance with the legal provisions in such a way that a personal reference is not easily possible when surfing the Internet.

 

WEB ANALYSIS

For the purpose of demand-oriented design, business management evaluation and control of the website and the continuous optimisation of our pages, we use the services described below on the basis of Art. 6 para. 1 lit. f GDPR. We may process your personal data until our legitimate interest ceases to exist.

 

USE OF GOOGLE ANALYTICS WITH ANONYMISATION

Based on our legitimate interests (i.e. interest in analysis, optimisation and economic analysis), we set a high value on the quality of our services. Operation of our online offer within the meaning of Art. 6 para. 1 lit. f GDPR) Google Analytics, a web analytics service of Google LLC ("Google"). The use includes the "Universal Analytics" operating mode.

Google uses cookies. The information generated by the cookie about usage of the online offer by the users are usually transferred to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google uses this information at the request of, and on behalf of, the operator of this website to evaluate your use of the website, to create reports on the website activities, and to provide the website’s operator with additional services connected with the use of the website and the Internet.

Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with IP anonymisation enabled. This means that the IP address of the users will be by Google within Member States of the European Union or in other States Parties to the Agreement on the European Economic Area. Only in exceptional cases the whole IP address will be first transfered to a Google server in the USA and truncated there.

The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly. In addition, you can disable the cookie’s sending of the data it has created concerning your use of this website (including your IP address) to Google and the processing of this data by Google if you download and install the browser plugin that is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 38 months. Data whose retention period has been reached is automatically deleted once a month.

Further information on data use by Google, setting and objection options can be found at the websites of Google: https://www.google.com/intl/en/policies/privacy/partners ("Use of data by Google when you use websites or apps of our partners"), https://policies.google.com/technologies/ads?hl=en ("Use of data for advertising purposes"), https://adssettings.google.de/authenticated ("Manage information Google uses to show you advertisement“)

 

LINK TO THIRD PARTIES

You will find links to other websites on this website, directly or indirectly by means of links. The legal basis for such processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. We may process your personal data until our legitimate interest ceases to exist. We hereby expressly distance ourselves from all contents of these sites to which links are established and do not adopt these contents as our own. We do not have any influence on changes of the linked content.

Our website may contain links to other providers' websites, which are not covered by this data protection policy. To the extent that the use of websites of other providers involves the capture, processing and use of personal data, please refer to the data protection policy of the relevant provider.

 

USE OF YOUTUBE

Our website uses the YouTube video platform operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 USA. YouTube is a platform that enables playback of audio and video files. When you load a page on our website, the integrated YouTube player establishes a connection to YouTube in order to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transferred to YouTube.

For information about the scope and purpose of data collection, the further processing and use of the data by YouTube and your rights and the settings you can configure to protect your privacy, please refer to the YouTube Privacy Guidelines: https://www.youtube.com/t/privacy_guidelines.

 

GOOGLE MAPS

Our website uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. The use of Google Maps is in the interest of an appealing representation of our online offers and at an easy findability of the places indicated by us on the web page.

 

You can find more information on the handling of user data in Google's data protection declaration: : https://www.google.de/intl/de/policies/privacy/

Google is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with the European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

 

Version: May 2018