Released: August 07, 2023

1. General information

Thank you for your interest in our offer and ALLEHERZEN GmbH (“ALLEHERZEN”). The protection of your privacy is very important to us. 

We process your personal data in accordance with the respective applicable legal data protection requirements for the purposes listed below. Personal data in the sense of this privacy policy is all information that has a reference to your person. Relevant personal data are in particular your personal data (e.g. name, address, contact details and date of birth), your billing data (e.g. bank data), information about your financial situation (e.g. creditworthiness data), advertising and sales data (i.e. findings from customer data analyses).

Below we inform you in detail about how we handle your data.

Responsible party and contact:

The company responsible for processing your personal data is ALLEHERZEN GmbH, Alwinenstraße 3 in 65189 Wiesbaden, Germany, telephone: 0611 / 16 75 10 9-0, email: datenschutz@alleherzen.de. 

If you have any questions or comments about data protection at ALLEHERZEN (for example, about accessing and updating your personal data), you can also contact us directly at datenschutz@alleherzen.de.

When you access our website or retrieve a file, data about this process is stored in a log file on our web server. In detail, the following data is stored:

– IP address 

– the domain name of the website you came from 

– the web pages you have visited in our offer 

– the names of the retrieved files 

– the date and time of a retrieval 

– the name of your internet service provider 

– and, if applicable, the operating system and browser version of your PC or terminal device.

2. IP addresses

We store IP addresses for a maximum period of seven days. The storage is done for data security reasons to ensure the stability and operational reliability of our system. We reserve the right to statistically evaluate anonymized data records.

3 Recipients of your personal data

3.1 Third parties and processors

Your personal data will also be used by other companies that are active on behalf of ALLEHERZEN (“order processors”) or are active within the scope of business partnerships of ALLEHERZEN (“third parties”). These may also be external companies and partners of ALLEHERZEN. Possible recipients of your data are address service providers, collection companies, network operators, shipping service providers, call centers, marketing and media agencies, market research institutes, social media companies, IT service providers, consultants or consulting companies, logistics companies, service providers for on-site installation, service providers for the purposes of billing and payment activities, telephone customer support, companies involved in the use of cookies and tracking pixels and other service and cooperation partners.

For details, please refer to the detailed descriptions of data processing in this data protection information.

The processors mentioned in this data protection information have been commissioned by ALLEHERZEN and committed to ALLEHERZEN’s level of data protection and data security. As part of this obligation, it was stipulated, among other things, that the service providers only receive data that is required for the respective fulfillment of the order.

3.2 Recipients outside the European Union (EU)

ALLEHERZEN has individual services and performances carried out by carefully selected and commissioned service providers who are based outside the European Economic Area (“third country”), e.g. IT service providers, market and opinion research institutes and social media companies. In these cases, a third country transfer takes place.

Supplementary note on data transfer to the USA and other third countries:

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

4. “Cookies” – information that is automatically stored on your computer.

When you visit one of our websites, we may place information on your computer in the form of a “cookie” that we will automatically recognize the next time you visit. If you do not want us to recognize your computer, please set your Internet browser to delete cookies from your computer hard drive, block all cookies or warn you before a cookie is stored. However, we would like to point out that the use and especially the comfort of use will be limited without cookies. 

In the information on cookies from other providers or those set by third-party providers (see below), there is always a link through which you can declare your objection. In this context, the provider will set an opt-out cookie on your computer, which prevents further data from being collected. As long as you wish to maintain your objection, you should not delete the opt-out cookie. Insofar as this cookie is subsequently deleted by you, you must carry out the deactivation again. In addition, you can object to the collection and storage of data by many other services under the link http://www.youronlinechoices.com/de/praferenzmanagement at any time with effect for the future.

5. Notes on web analysis

In order to continuously improve and optimize our offer, as well as to display interest-based personalized advertising, we use the third-party web tracking and analysis services described below:

Google Analytics

This website uses Google Analytics in conjunction with Google Tag Manager, a web analytics service provided by Google LL.C., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The statistics obtained enable us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in the settings there under “My data”, “Personal data”.

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. We point out that on this website Google Analytics has been extended by the code “_anonymizeIp();” to ensure anonymized collection of IP addresses. This means that IP addresses are processed in abbreviated form, which means that they cannot be linked to a specific person. As far as the data collected about you a personal reference, this is excluded immediately and the personal data is deleted immediately.

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https:// www.privacyshield.gov/EU-US-Framework.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

You can also prevent the use of Google Analytics by clicking on this link: Disable Google Analytics. This will save a so-called opt-out cookie on your data carrier, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your terminal device, these opt-out cookies will also be deleted, i.e. you will have to set the opt-out cookies again if you wish to continue to prevent this form of data collection. The opt-out cookies are set per browser and computer/end device and must therefore be activated separately for each browser, computer or other end device.

Google Ads

This website uses the online marketing tool Google Ads by Google (“Google Ads”). Google Ads uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Google Ads can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Google Ads ad and later calls up the advertiser’s website with the same browser and buys something there. According to Google, Google Ads cookies do not contain any personal information. 

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. Through the integration of Google Ads, Google receives the information that you have called up the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or are not logged in, there is the possibility that Google learns your IP address and stores it.

You can prevent participation in this tracking process in various ways:

(a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies will result in you not receiving third-party ads;

b) by disabling conversion tracking cookies by setting your browser to block cookies from the domain “www.googleadservices.com”, https://adssettings.google.com, which setting will be deleted when you delete your cookies;

c) by disabling the interest-based ads of the providers that are part of the “About Ads” self-regulatory campaign, through the link https://www.aboutads.info/choices, this setting being deleted when you delete your cookies;

d) by permanently disabling them in your Firefox, Safari, Internet Explorer, Microsoft Edge or Google Chrome browsers at the link https://www.google.com/settings/ads/plugin. We point out that in this case you may not be able to use all functions of this offer in full.

The legal basis for the processing of your data is a balancing of interests, according to which the processing of your personal data described above is not opposed by any overriding interests on your part (Art. 6 para. 1 p. 1 lit. f DSGVO). You can find more information about Google Ads from Google at https://ads.google.com/intl/de_DE/ home/, and about data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at https://www.networkadvertising.org.

Google Remarketing

This website uses the remarketing function of Google. This function is used to present interest-based advertisements to visitors of the website within the Google advertising network. Cookies are used to recognize individual visitors when they visit websites that belong to the Google advertising network. On these pages, the visitor can then be presented with advertisements that relate to content that the visitor has previously accessed on websites that use Google’s remarketing function. According to its own information, Google does not collect any personal data during this process. The legal basis for the processing of your data is a balancing of interests, according to which the processing of your personal data described above is not opposed by any overriding interests on your part (Art. 6 (1) sentence 1 lit. f DSGVO).

If you nevertheless do not wish to use Google’s remarketing function, you can deactivate it in principle by making the appropriate settings at https://adssettings.google.com/. Alternatively, you can deactivate the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at https://optout.networkadvertising.org. Further information on Google Remarketing and Google’s privacy policy can be found at https://policies.google.com/technologies/ads?hl=de.

CrazyEgg.com

This site uses the tracking tool CrazyEgg.com to record randomly selected individual visits with anonymized IP address only. This tracking tool allows using cookies to evaluate in which way you use the website (e.g. which content is clicked on). For this purpose, a usage profile is displayed visually. Only usage profiles are created using pseudonyms. The legal basis for the processing of your data is a balancing of interests, according to which the processing of your personal data described above is not opposed by any overriding interests on your part (Art. 6 para. 1 p. 1 lit. f DSGVO).

You can object at any time to the collection, processing and recording of the data generated by CrazyEgg.com by following the instructions at https://www.crazyegg.com/opt-out. Further information on data protection at CrazyEgg.com can be found at https://www.crazyegg.com/privacy.

Facebook Pixel, Facebook Custom Audiences and Facebook Conversion API

Within our online offer, the so-called “Facebook Pixel” of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”), is used.

With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine you as a visitor to our website as a target group for the display of advertisements (so-called “Facebook Ads”). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

We use the tracking tool Facebook Conversion API of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc. 1601, Willow Road Menlo Park, CA 94025, USA.

This is a data interface through which we transmit data about your user behaviour on our website to Facebook for evaluation. This enables us to show you advertisements that match your user behaviour on our website. 

In connection with the Conversion API, we use the following data: Email address, telephone number, gender, date of birth, first and last name, city, state and country, postcode, user IDs, IP address, client user agent (the browser you use and your operating system), click IDs, browser ID, product IDs, advertising ID, Facebook login ID.

We transmit this data to Facebook. In the process, the data is also transmitted to Facebook in the USA. 

There is no EU Commission adequacy decision for data transfers to the USA. Facebook ensures an adequate level of data protection via the EU standard contractual clauses. You can access a copy of the contractual clauses here: https://www.facebook.com/legal/EU_data_transfer_addendum

Privacy policy of Facebook

The processing of data by Facebook takes place within the framework of Facebook’s data use policy. Accordingly, general information on the display of Facebook ads, in the data use policy of Facebook. Specific information and details about the Facebook pixel and how it works can be found in Facebook’s help section.

EU-US Privacy Shield

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law.

Basis

The use of the Facebook Pixel and the storage of “conversion cookies” is based on Art. 6 (1) lit. f DSGVO. We have a legitimate interest in analyzing user behavior in order to optimize both our website and our advertising.

Order data processing contract

For the processing of data where Facebook acts as an order data processor, we have concluded an order data processing contract with Facebook, in which we oblige Facebook to protect our customers’ data and not to pass it on to third parties.

Objection

Although we declare legitimate interests in using the Facebook pixel and storing “conversion cookies”, we offer opt-out options. You can object to the collection by the Facebook Pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising. The settings are done in a platform-independent manner, which means that they are applied to all devices, such as desktop computers or mobile devices. You can further object to the use of cookies that are used for reach measurement and advertising purposes via the Network Advertising Initiative deactivation page and additionally the US website aboutads.info or the European website youronlinechoices.com.

6. General information on usage-based online advertising

Usage-based online advertising, also known as targeting, allows advertisers to identify the user when delivering an ad and assign it to a target group. With the help of this information, it is possible to display more relevant ads to the user. Usage-based advertising takes place in three steps: The collection of data via so-called tracking pixels, the storage and processing of log file information, and the ultimate use of this information in retargeting or lookalike retargeting. We would like to explain these steps in a little more detail below.

6.1 Use of tracking pixels on the site

Tracking pixels are small graphics on web pages that enable log file recording and log file analysis, which are used for statistical analysis. Tracking pixels write information to the cookie file in the user’s browser when visiting the website.

6.2 Storing log file information in the cookie file.

To record your user behavior, a cookie is stored on your computer when you visit our site. Cookies are small text files that are stored on the hard drive of your computer and allow a website to recognize your browser, but do not allow personal identification of you. Information is collected about your activities on the websites you visit (e.g. surfing behavior, sub-pages visited on the Internet, advertising banners clicked, etc.). All usage data is stored using a pseudonym, so that it is impossible to draw conclusions about your person and thus personal identification.

6.3 Use of Cookie Information for Retargeting and Lookalike Retargeting

The cookie with the corresponding information allows the anonymous recognition of the user’s browser and a corresponding retargeting on external websites. 

Furthermore, statistical twins of the original cookie profiles are identified and addressed on the basis of the accumulated cookie information. This is referred to as lookalike retargeting. 

The usage profiles made possible by this so-called retargeting technology are created in accordance with the legal provisions in such a way that it is not possible to draw conclusions about your person and thus personal identification without further ado. For more on the topic of usage-based advertising, see http://www.youronlinechoices.com/de/praferenzmanagement.

Newsletter

In the following, we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of objection. In the event that you subscribe to our newsletter, you agree to receive it and to the procedures described below.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter “newsletter”) only with the consent of the recipient or a legal permission. If the contents of the Newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain information about our services, selected projects and us.

Double-Opt-In and logging: The registration for our newsletter takes place in a so-called double-opt-in process. This means that after registration you will receive an email in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other email addresses. The registrations to the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise, changes to your data stored with the dispatch service provider are logged.

Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for the purpose of personal address in the newsletter.

The dispatch of the newsletter and the performance measurement associated with it are based on the consent of the recipients pursuant to Art. 6 para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 para. 2 no. 3 UWG or, if consent is not required, on the basis of our legitimate interests in direct marketing pursuant to Art. 6 para. 1 lt. f. DSGVO in conjunction with. § Section 7 (3) UWG.

The logging of the registration process takes place on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves our business interests as well as meets the expectations of the users and furthermore allows us to prove consent.

Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i.e. revoke your consents. You will find a link to cancel the newsletter at the end of each newsletter. We may store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them to be able to prove consent formerly given. The processing of this data is limited to the purpose of a possible defense against claims. An individual deletion request is possible at any time, provided that the former existence of consent is confirmed at the same time.

The newsletter is sent using the dispatch service provider “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. You can view the privacy policy of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d/b/a MailChimp is certified under the Privacy Shield agreement, thereby providing a guarantee of compliance with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active). The shipping service provider is used on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f. DSGVO and an order processing agreement pursuant to Art. 28 para. 3 p. 1 DSGVO.

The dispatch service provider may use the data of the recipients in pseudonymous form, i.e. without assignment to a user, to optimize or improve its own services, e.g. to technically optimize the dispatch and presentation of the newsletter or for statistical purposes. However, the dispatch service provider does not use the data of our newsletter recipients to write to them itself or to pass this data on to third parties.

8. Security

ALLEHERZEN takes precautions to ensure the security of your personal data. Your data is conscientiously protected against loss, destruction, falsification, manipulation and unauthorized access or disclosure.

9 Links to other websites

The ALLEHERZEN websites contain links to other websites. ALLEHERZEN is not responsible for the data protection strategies or the content of these other websites.

10. Your rights

In accordance with the statutory provisions (including any applicable restrictions from the DSGVO and/or the BDSG-neu), you may assert the following rights against us:

10.1 Information

Thus, you have the right to receive information from us about your data stored by us.

10.2 Correction

Upon your request, we will correct the data stored about you if it is inaccurate or incorrect.

10.3 Deletion

If you wish, we will delete your data, provided that other legal regulations (e.g. legal retention obligations) or an overriding interest on our part (e.g. for the defense of our rights and claims) do not prevent this.

10.4 Restriction

Taking into account the legal requirements, you may request us to restrict the processing of your data.

10.5 Data transfer

You also have the right, subject to the legal requirements, to receive your data in a structured, common and machine-readable format or to transfer it to a third party.

10.6 Complaint

Furthermore, you have the right to lodge a complaint with a data protection supervisory authority. You are welcome to contact our data protection officer first.

10.7 Objection

Furthermore, you may object to the processing of your data.

*****************************

Right of objection

Insofar as we process personal data as explained above in order to protect our legitimate interests that prevail in the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you will only have the right to object if there are grounds arising from your particular situation.

After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.

*****************************

To exercise these aforementioned rights, you can contact us using one of the contact details listed in section 1.