General information and mandatory statement
The responsible office
The responsible office for the data processing on this website is:
CO2‑POSITIV UG (hb)
Boxbrunner Str. 10
91085 Weisendorf
Germany
Phone: +49 911 14897513
Email: info@co2-pos.de
Imprint
The responsible body decides alone or together with others on the purposes and means of processing personal data (eg name, contact details, etc.).
Revocation of your consent to data processing
Only with your express consent are some processes of data processing possible. A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to complain to the competent supervisory authoritylaw, theright of appeal to the competent supervisory
In the event of a breach of data protectionperson concerned has theauthority. The competent supervisory authority with regard to data protection issues is the state data protection officer of the federal state in which the headquarters of our company is located. The following link takes you to the responsible Bavarian State Commissioner for Data Protection, Wagmüllerstraße 18, 80538 Munich and further contact details: https://www.datenschutz-bayern.de/.
Right of data portability
You have the right to have your personal information transmitted to us or third parties on the basis of your consent or in fulfillment of a contract. The provision is made in a machine-readable format. If you require the direct transfer of the data to another person in charge, this will only be done to the extent technically feasible.
Right to Information, Correction, Blocking, Deletion
You have the right at any time in the context of the valid legal provisions to free information about your stored personal data, source of data, their recipients and the purpose of data processing and, if necessary, a right of rectification, blocking or Deletion of this data. In this regard and also to further questions on the subject of personal data, you can always contact us via the contact options listed in the imprint.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content that you send to us as a site operator, our website uses an SSL or TLS encryption. Thus, data that you submit via this website, for others not readable. You will recognize an encrypted connection at the “https: //” address bar of your browser and at the lock icon in the browser bar.
Hosting, Emailing
We use hosting services to use the technical infrastructure we need for our online services for services such as web pages, e-mail, storage and databases, as well as security services and maintenance. Server location is Germany.
This server stores the communication, usage, metadata and inventory data of the visitors or users of our website. The basis for this is our legitimate interest in an efficient and secure provision of the online offers acc. Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 GDPR.
Order Processing
Into fully comply with the legal data protection requirements, we have concluded a contract processing order with our hosting service provider.
Server Log Files
In server log files, the website provider automatically collects and stores information that your browser automatically sends to us. These are:
- Visited page on our domain
- Date and time of the server
- request Browser type and browser
- version Operating system used
- Referrer URL
- Host name of the accessing computer
- IP address
There is no merge of this data with other data sources. The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or precontractual measures.
Data transmission at the conclusion of the contract for the sale of goods and the dispatch of goods
Personal data will only be transmitted to third parties if there is a need for the execution of the contract. Third parties may be, for example, payment service providers or logistics companies. A further transmission of the data does not take place or only if you have expressly consented to this.
The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data for the performance of a contract or precontractual measures.
Registration on this website
To use certain functions, you can register on our website. The transmitted data serve exclusively for the purpose of the use of the respective offer or service. Required information requested during registration must be given in full. Otherwise we will reject the registration.
In case of important changes, for technical reasons for example, we will inform you by e-mail. The e-mail will be sent to the address specified when registering.
The processing of the data entered during registration takes place on the basis of your consent (Art. 6 (1) lit. GDPR). A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail. The legality of the already completed data processing remains unaffected by the revocation.
We store the data collected during the registration during the period you are registered on our website. Your data will be deleted should you cancel your registration. Legal retention periods remain unaffected.
Contact
Form Data sent via the contact form will be stored, including your contact details, to process your request or to be available for follow-up questions. A disclosure of this data will not take place without your consent.
The processing of the data entered into the contact form takes place exclusively on the basis of your consent (Art. 6 (1) lit. GDPR). A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.
Data submitted via the contact form will remain with us until you ask us to delete it, revoke your consent to storage, or you no longer need to back up your data. Mandatory statutory provisions – especially retention periods – remain unaffected.
Newsletter
To send our newsletter, we need an e-mail address from you. It is necessary to verify the given e-mail address and to accept the newsletter. Supplementary data are not collected or are voluntary. The use of the data takes place exclusively for the dispatch of the newsletter.
The data provided in the newsletter registration are processed exclusively on the basis of your consent (Art. 6 (1) lit. GDPR). A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail or you sign up via the “unsubscribe” link in the newsletter. The legality of the already completed data processing operations remains unaffected by the revocation.
Data entered to set up the subscription will be deleted in the event of cancellation. If these data have been transmitted to us for other purposes and elsewhere, they will remain with us.
Newsletter Statistics
When sending our newsletter, we use image files downloaded from our server as well as encoded links to analyze the success and click through rate of our newsletters. Among other things, this serves to automatically detect inactive recipients and delete them from our lists. This data and your data entered to receive the newsletter, such as your e-mail address, will only be stored on our server and will not be disclosed to third parties. Server location is Germany.
The data processing takes place on the basis of your consent (Art. 6 (1) lit. GDPR). A revocation of your already given consent is possible at any time. For the revocation is sufficient an informal message by e-mail or you sign up via the “unsubscribe” link in the newsletter. The legality of the already completed data processing operations remains unaffected by the revocation.
If you do not want an analysis of the mail reception, unfortunately you can not use our newsletter service. For unsubscribing an informal message by e-mail to us is sufficient or you sign up via the “unsubscribe” link in the newsletter.
Cookies
Our website uses cookies. These are small text files that your web browser stores on your device. Cookies help us make our offer more user-friendly, effective and secure.
Some cookies are “session cookies”. Such cookies will be deleted automatically after the end of your browser session. On the other hand, other cookies remain on your device until you delete them yourself. Such cookies help us to recognize you when you return to our website.
With a modern web browser, you can monitor, restrict or prevent the setting of cookies. Many web browsers can be configured to automatically delete cookies when the program is closed. The deactivation of cookies may result in limited functionality of our website.
The setting of cookies, which are necessary for the performance of electronic communication processes or the provision of certain functions desired by you (eg shopping cart), takes place on the basis of Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies for the technically flawless and smooth provision of our services. If other cookies are set (eg for analysis functions), they are treated separately in this privacy policy.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the “Real Cookie Banner” consent tool. Details on how “Real Cookie Banner” works can be found at https://devowl.io/rcb/data-processing/.
The legal basis for the processing of personal data in this context is Article 6 (1) (c) GDPR and Article 6 (1) (f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we cannot manage your consents.
Third Party Services
We use third party services, some of which are located overseas, to optimize our online offering by including videos, fonts and features. Technically necessary in these cases is the transmission of the IP address of the user, at the latest when the corresponding service is activated, otherwise already when the page is called. In addition, third parties can store cookies in the user’s browser.
The use of the third-party providers mentioned in the following sections is based on our interest in the optimization and user-friendly operation of our online offer within the meaning of Art. 6 (1) lit. f. GDPR.
Payment service provider
Our website enables the payment of goods and services with various external payment service providers. These may include: Google Pay (https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos), Apple Pay (https://www.apple.com/legal/applepayments/direct-payments/), Paypal (https://www.paypal.com/webapps/mpp/ua/privacy-full), Klarna/Sofort (https://www.klarna.com/uk/privacy-statement/), Skrill (https://www.skrill.com/en/footer/privacypolicy/), Giropay (https://www.giropay.de/rechtliches/datenschutz-agb/), Visa (https://usa.visa.com/legal/global-privacy-notice/jurisdictional-notice-eea.html), Mastercard (https://www.mastercard.us/en-us/about-mastercard/what-we-do/privacy.html), American Express (https://www.americanexpress.com/us/legal-disclosures/privacy-center.html), Przelewy24 / P24 (https://www.przelewy24.pl/polityka-prywatnosci), iDEAL (https://www.ideal.nl/disclaimer-privacy/), EPS transfer (https://eservice.psa.at/de/datenschutzerklaerung.html), Multibanco (https://www.multibanco.pt/privacidade/), Bancontact (https://www.bancontact.com/files/privacy.pdf), as well as all payments except Paypal and manual transfer in addition: Stripe (https://stripe.com/privacy). The privacy policy is always linked.
If you pay with payment service providers, a transfer of the payment data you entered to this / these. The transmission of your data is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (processing to fulfill a contract). A revocation of your already given consent is possible at any time. Past data processing operations remain in effect on revocation.
As a rule, payment service providers use cookies to optimize the checkout process. This optimization constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Cookies of payment service providers remain on your device until you delete them.
Google Web Fonts
Our website uses fonts (web fonts) from Google. Provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
By using these web fonts, it will be possible for you to present the desired presentation of our website, regardless of which fonts are available to you locally. This is done by retrieving the Google Web fonts from a Google server in the US and then sharing your data with Google. This is your IP address and which page you visited. The use of Google Web Fonts is based on Art. 6 para. 1 lit. f GDPR. As the operator of this website, we have a legitimate interest in the optimal presentation and transmission of our website.
The company Google is certified for the us European privacy agreement “Privacy Shield”. This privacy agreement aims to ensure compliance with the level of data protection in the EU.
For details about Google Web Fonts, visit: https://fonts.google.com/#AboutPlace:about and more information in Google’s Privacy Policy: https://policies.google.com/technologies/partner-sites?hl=en.
Social Media Presence
We operate online presences within social platforms and networks to reach and communicate with users who are active on these platforms.
This data of users outside the EU can be processed. We highlight the specific dangers of using Services that are not “Privacy Shield” certified and do not commit to comply with the EU Privacy Policy.
In most cases, the data entered and transmitted are used by the provider of the respective platform for advertising and market research purposes as well as for the generation of personal interest profiles. For this purpose, cookies are stored on the user’s computer and data from various devices, on which the user is logged in, as well as data on the use of websites (such as ours) over or with functions of the respective provider.
The processing of personal data that is made available to us is due to our legitimate interest in effective communication with users for the purpose of information in accordance with. Art. 6 para. 1 lit. f. GDPR. If the users of the respective provider of the platform to an agreement for data processing, is Art. 6 para. 1 lit. a., Art. 7 GDPR The legal basis of the processing.
Source: Privacy Configurator of mein-datenschutzbeauftragter.de / with additions
