Data protection statement for the website of arcona Management GmbH
Personal data will be generated when you visit our websites. These are data that are required in order to enable you to use our websites or to enable us to consider your settings. Apart from this, they are information that you provide to us via the contact options offered on these pages.
We use these data in order to ensure proper operation of our website and to answer your queries.
Below, we inform you concerning the data collected on our website and the purposes for which they are processed. We will inform you about the use of “cookies” and the analysis tools used on our websites, and the option for approving or rejecting them. We will inform you concerning your rights and the contact details of our data protection officer at the end of the data protection statement.
You may prevent setting of cookies by our website at any time by making the corresponding setting in the web browser used and thereby permanently object to setting of cookies. Furthermore, cookies already set may be erased at any time via a web browser or other software programs. This is possible in all common web browser. If the data subject deactivates setting of cookies in the web browser used, not all functions of our website may be fully usable.
Server log files
The provider of our website will automatically collect and store information in server log files that your browser submits to us automatically. The recorded data may include
(1) browser types and versions used,
(2) the operating system used by the accessing system,
(3) the website from which an accessing system reaches our website (referrers),
(4) sub-webpages that are controlled via an accessing system on our website,
(5) the data and time of an access to the website,
(6) an internet protocol address (IP address),
(7) the internet service provider of the accessing system and
(8) other similar data and information that serve to defend against attacks on our information-technical systems.
We do not draw any conclusions concerning you when using these general data and information. Instead, this information is needed to
(1) properly deliver the contents of our website,
(2) optimise the contents of our website and advertisements for it,
(3) ensure permanent function of our information-technology systems and the technology of our website
(4) provide the criminal prosecution authorities with the information required for criminal prosecution in case of a cyberattack.
These data and information are therefore evaluated by us statistically and with the target of increasing data protection and data security in our company, in order to finally ensure an optimal protection level for the personal data processed by us. The anonymous data of the server log files are stored separately from any other personal data you indicate. These data will not be combined with any other data sources. If there are any indications of illegal use of our website, however, we are able to subsequently inspect these data.
Customers can register with us
You can register on our website by stating your personal data. Which personal data is transmitted to us results from the respective input mask used for registration. The personal data entered by you will be collected and stored exclusively for internal use by us and for our own purposes. However, we can arrange for the data to be transferred to one or more contract processors, for example a parcel service provider, who will then also use the personal data exclusively for internal use attributable to us.
When you register on our website, the IP address assigned to you, the date and time of registration are also stored. This data is stored because that this is the only way to prevent misuse of our services and, if necessary, to enable us to investigate criminal offences committed. In this respect, the storage of this data is necessary for our protection. These data are only transferred to third parties if there is a legal obligation to transfer them or if the transfer serves the purpose of criminal prosecution.
Your registration is subject to the voluntary disclosure of personal data and serves to provide you with contents or services, which can be offered only to registered users due to the nature of the matter. Registered persons are generally free to change the personal data provided during registration at any time or to have it completely deleted from our database, unless the right to deletion is restricted by law.
Upon request, we will inform you at any time which personal data about you is stored. Furthermore, we correct or delete personal data at your request, unless the rights to rectification or deletion are restricted by law. The data protection officer named in this privacy notice and all our employees are available to you as contact persons in this matter.
1. Newsletter subscription:
On our website, users can subscribe to our company’s newsletter. Which personal data of the data subject are transmitted for processing when ordering the newsletter results from the input mask used for this purpose.
We inform our customers and business partners at regular intervals by means of a newsletter about offers from our company. The newsletter of our company can only be received by you if
(1) you have a valid e-mail address and
(2) you have registered for the newsletter.
For legal reasons, a confirmation e-mail is sent in the double opt-in procedure to an e-mail address registered for the newsletter dispatch the first time. This confirmation e-mail serves to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the data subject.
When registering for the newsletter, we also store the IP address assigned to you as well as the date and time of registration. The collection of this data is necessary in order to be able to trace any misuse of the e-mail address of a data subject at a later point in time and therefore serves our legal protection.
The personal data collected when registering for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed by e-mail if this is necessary for the operation of the newsletter service or for registration, as could be the case in the event of changes to the newsletter offer or changes in the technical conditions. The personal data collected in the context of the newsletter service will not be transferred to third parties.
You can cancel your subscription to our newsletter at any time. You can revoke your consent to the storage of personal data that you have given us for sending the newsletter at any time. For the purpose of revoking your consent, you will find a corresponding link in every newsletter. It is also possible at any time to unsubscribe directly from the newsletter dispatch on our website or to inform us of this in another way.
Our newsletters may contain so-called tracking pixels. A tracking pixel is a miniature graphic embedded in e-mails sent in HTML format to enable log file recording and analysis. This allows us to perform a statistical evaluation of the success or failure of online marketing campaigns. On the basis of the embedded tracking pixels we can see whether and when an e-mail was opened by a recipient and which links in the e-mail were called up.
Such personal data collected via the tracking pixels contained in the newsletters is stored and evaluated by us in order to optimise our newsletter dispatch and to adapt the content of future newsletters even better to the interests of recipients. This personal data will not be transferred to third parties.
Data subjects are entitled at any time to revoke the respective separate declaration of consent given via the double opt-in procedure. After revocation, this personal data will be deleted, unless the right to erasure is restricted by law. If you unsubscribe from receiving the newsletter, we automatically interpret this as a revocation of your consent.
Due to legal regulations, our website contains information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If you contact us by e-mail or via a contact form, the personal data you provide will be automatically stored. Such personal data transmitted on a voluntary basis will be stored for the purposes of processing or contacting you. There is no disclosure of this personal data to third parties.
Blog – It is possible to comment on blog content (1.) / subscribe to blog content (2.)
1. Commenting on blog content:
We offer users the opportunity to leave individual comments on specific blog posts on a blog located on our website. A blog is a web-based, usually publicly accessible portal in which one or more people, who are called bloggers or web bloggers, can post articles or write down thoughts in so-called blog posts. The blog posts can usually be commented on by third parties.
We use the external service provider Disqus to run our blog. The operating company is Disqus Inc., 717 Market St, San Francisco, CA 94103.
It is a comment system that stores comments on US servers. This is accompanied by storage of your IP address and the comments themselves on the servers of Disqus Inc.
If the data subject leaves a comment in the blog published on this website, in addition to the comments left by the person concerned, information on the time of the commentary input and the username (pseudonym) chosen by the data subject are also saved and published. Furthermore, the IP address assigned to you will also be logged. The IP address is stored for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content by submitting a comment.
The storage of this personal data is therefore in our own interest, so that we could exculpate ourselves in case of infringement if necessary. There is no disclosure of this collected personal data to third parties, unless such disclosure is required by law or serves our legal defence.
2. Subscribing to blog content:
The comments made in our blog can be subscribed to by third parties in principle. In particular, there is an option for a commentator to subscribe to comments following his/her comment on a particular blog post.
If you choose to subscribe to comments, we will send an automatic confirmation email to double-check whether the owner of the specified email address has actually opted for this option. The option to subscribe to comments can be terminated at any time.
Blog/Guestbook – It is possible to write guestbook entries
We offer users the opportunity to leave individual comments in our blog/guestbook on our website. A blog/guestbook is a portal on a website, usually open to the public, in which one or more people can poste or write article entries or thoughts.
If a data subject leaves a comment in the blog/guestbook published on this website, in addition to the comments left by the data subject information about the time of the comment entry or post and the user name (pseudonym) chosen by the data subject will be stored and published. We will use your entered data only for the processing of the entries of the blog/guestbook form. Your e-mail address will not be published. The IP address assigned to you will be recorded. This IP address is stored for security reasons and in the event that the data subject violates the rights of third parties or posts illegal content by submitting a comment.
The storage of this personal data is in our own interest, so that we can exculpate ourselves in the event of a violation of the law. The personal data collected will not be transferred to third parties, unless such disclosure is required by law or serves our legal defence.
We collect and process the personal data of applicants for the purpose of conducting the application procedure. Processing may also take place electronically. This is specifically the case if an applicant transmits the corresponding application documents to us electronically, e.g. by email or via a web form on the website.
If we conclude an employment contract with an applicant, the transmitted data will be saved for the purpose of the employment in compliance with legal regulations. If we do not conclude an employment contract with the applicant, the application documents will be deleted automatically six months after disclosure of the negative decision if deletion is not opposed by any other legitimate interests on our side.
Other legitimate interests in this context shall include evidence obligations in proceedings under the general law on equal treatment (Allgemeines Gleichbehandlungsgesetz; AGG). If applicants and employers are interested in being included in an applicant pool and accordingly in longer-term storage of the data, the applicant must give his or her consent to so. In such a case, the applicant will be informed of the data protection statement of the company and the specific provisions of the company’s applicant data protection. Subsequently, a written declaration of consent to processing activities is collected for the purpose of the application to ensure documentation and the applicant will at the same time be informed that he or she may revoke the consent at any time, effective for the future.
In the context of our Internet offer, for example to find branches and/or locations of our company, interactive maps of the map service “Google Maps API” of Google LLC are used.
The operating company is Google LLC; 1600 Amphitheatre Parkway; Mountain View, CA 94043; USA. When using this service, information about the use of our website as well as your IP address are transmitted to Google LLC. servers in the USA and stored. The EU Commission’s adequacy decision 2016/1250 determines an appropriate level of data protection for the USA due to the EU-US Privacy Shield.
If you do not wish the data to be transmitted, you can deactivate the map service and thus prevent the transfer of data to Google LLC. To do this, you must deactivate the Java Script in the browser.
II. Social media
We have integrated components of Facebook on this website. Facebook is a social network.
A social network is an Internet-based social meeting place, i.e. an online community that generally enables users to communicate with each other and to interact in virtual space. A social network can serve as a platform for the exchange of views and experiences or enables the Internet community to provide personal or business-related information. Among other things Facebook enables social network users to create private profiles, upload photos and socialize via friendship requests.
By clicking on third party websites such as Facebook takes you to the respective third party over which we have no control.
The operating company of Facebook is Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA. The controller for the processing of personal data if a data subject lives outside the USA or Canada is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time you access one of the individual pages of this website operated by us and on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on your system is automatically triggered by the respective Facebook component to download a depiction of the corresponding Facebook component from Facebook. An overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/?locale=en_DE. As part of this technical process, Facebook is informed about which specific subpage of our website you are visiting.
If you are simultaneously logged in to Facebook, Facebook recognizes which specific subpage of our website you are visiting each time you visit our website and for the entire duration of your stay on our website. This information is collected by the Facebook component and allocated to your Facebook account by Facebook. If you click one of the Facebook components integrated on our website, for example the “Like” button, or enter a comment, Facebook allocates this information to your personal Facebook user account and stores this personal data. Depending on your privacy settings, your preferences may become visible to your Facebook friends.
Facebook always receives information via the Facebook component that you have visited our website whenever you are simultaneously logged in to Facebook at the time you visit our website, regardless of whether you click on the Facebook component or not.
If you do not want this information to be sent to Facebook, you can prevent it from being sent by logging out of your Facebook account before visiting our website.
The data policy published by Facebook, which is available at https://de-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains what settings Facebook offers to protect your privacy. In addition, various applications are available that make it possible to suppress data transmission to Facebook, for example the Facebook blocker of the provider Webgraph, which can be obtained at http://webgraph.com/resources/facebookblocker/. Such applications can be used by you to suppress data transmission to Facebook.
We have integrated components of Instagram on our website. Instagram is a service that can be qualified as an audiovisual platform that enables users to share photos and videos and to redistribute such data on other social networks.
Instagram’s services are operated by Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA.
Each time you access one of the individual pages of our website on which an Instagram component (Insta button) is integrated, the Internet browser on your system is automatically triggered by the respective Instagram component to download a depiction of the corresponding Instagram component. As part of this technical process, Instagram is informed which specific subpage of our website you are visiting.
If you are simultaneously logged in to Instagram, each time you visit our website and for the entire duration of your stay on our website, Instagram recognizes which specific subpage you are visiting. This information is collected by the Instagram component and allocated to your Instagram account by Instagram. If you click one of the Instagram buttons integrated on our website, the data and information transferred will be allocated to your personal Instagram user account and stored and processed by Instagram.
Instagram receives information via the Instagram component that you have visited our website whenever you are logged in to Instagram at the same time as you access our website, regardless of whether you click on the Instagram component or not.
If you do not want this information to be sent to Instagram, you can prevent it from being sent by logging out of your Instagram account before visiting our website.
We have integrated components of YouTube on our website. YouTube is an Internet video portal that enables video publishers to post video clips and other users to view, rate and comment on them free of charge. YouTube enables the publication of all types of videos, so that complete film and television broadcasts, music videos, trailers or videos produced by users themselves are available via the Internet portal.
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time you visit one of the individual pages of our website, on which a YouTube component (YouTube video) is integrated, the Internet browser on your system is automatically triggered by the respective YouTube component to download a depiction of the corresponding component from YouTube. As part of this technical process, YouTube and Google are informed about which specific subpage of our website you are visiting.
If you are simultaneously logged in to YouTube, YouTube recognizes which specific subpage you are visiting each time you visit our website and for the entire duration of your stay on our website. This information is collected by the YouTube component and allocated to your YouTube account by YouTube. If you click on a YouTube component integrated on our website, the data and information transferred will be allocated to your personal YouTube user account and stored and processed by YouTube and Google.
YouTube and Google receive information via the YouTube component that you have visited our website whenever you are simultaneously logged in to YouTube as you visit our website; this happens regardless of whether you click on the YouTube component or not.
If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before visiting our website.
We have integrated components of the Pinterest Inc. service on our website. Pinterest is a so-called social network. A social network is an internet-based social meeting place, an online community that usually allows users to communicate with each other and interact in the virtual space. A social network can serve as a platform to exchange views and experiences, or allows the Internet community to provide personal or business information. Among other things, Pinterest enables users of the social network to publish picture collections and single images as well as descriptions on virtual pinboards (known as pinning), which in turn can be shared by other users (known as repining) or commented on.
Pinterest’s operating company is Pinterest Inc., 808 Brannan St., San Francisco, CA 94103, USA.
Each time you visit one of the pages on our website that has a built-in Pinterest component (Pinterest plug-in), the Internet browser on your system is automatically prompted by the Pinterest component to download a representation of the corresponding component of Pinterest. As part of this technical process, Pinterest is informed of which specific subpage of our website you visit.
If you are logged in to Pinterest at the same time, Pinterest recognises each time you visit our website and which specific subpage you visit for the entire duration of your stay on our website. This information is collected by the Pinterest component and assigned through Pinterest to your respective Pinterest account. If you use a Pinterest button integrated on our website, Pinterest assigns this information to your personal Pinterest user account and saves this personal data.
Pinterest always receives information via the Pinterest component that you have visited our website if you are simultaneously logged in to Pinterest at the time of access to our website; this happens regardless of whether you click on the Pinterest component or not. If you do not wish to transfer such information to Pinterest, you can prevent the transfer by logging out of your Pinterest account before accessing our website. Pinterest always receives information via the Pinterest component that you have visited our website if you are simultaneously logged in to Pinterest at the time of access to our website; this happens regardless of whether you click on the Pinterest component or not.
If you do not wish to transfer such information to Pinterest, you can prevent the transfer by logging out of your Pinterest account before accessing our website.
If, in addition to the information contained here, links are made to websites of other providers, this data protection declaration does not apply to their content. The collection of data by the operators of the respective pages is beyond our knowledge and sphere of influence. Please note the data protection information of the respective page.
III. Analysis tools
Google Analytics (with anonymisation function)
We have integrated the component Google Analytics (with anonymisation function) on our website.
Google Analytics is a web analysis service. Web analysis means the collection, aggregation and evaluation of data concerning the behaviour of visitors on websites. A web analysis service collects, among others, data regarding from which website a data subject came to a website (referrers), which sub-pages of the website were accessed or how often and for how long a subpage was viewed.
The operator company of the Google Analytics component is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of the Google Analytics component is analysis of the visitor flows on our website. Google uses the data and information gained among others to evaluate use of our website, in order to compile online reports for us that indicate the activities on our websites and in order to render further services connected to use of our website.
Google Analytics places a cookie in your system. By every call of a single page of this website on which a Google Analytics component was integrated, the Google Analytics component will automatically cause your web browser to transmit data to Google for the purpose of online analysis. Within the context of this technical procedure, Google will gain knowledge of personal data, such as your internet protocol address, in order to track the origin of the visitors and clicks. The cookie is used to store personal data, such as the access time, place from which an access took place and frequency of visits to our website by you. At every visit to our websites, these personal data, including the internet protocol address used by you, will be transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass on such personal data collected with technical means to third parties.
You may prevent setting of cookies at any time by making the corresponding setting in the web browser used and thereby permanently object to setting of cookies.
You are also able to object to recording of the data generated by Google Analytics referring to use of this website and processing of such data by Google and prevent this. For this, you must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it.
For further information and the applicable provisions on data protection of Google, see https://www.google.de/intl/de/policies/privacy/. Google Analytics is explained in more detail under the link https://www.google.com/intl/de_de/analytics/.
We use Hotjar, an analysis software of Hotjar Ltd. on our website (Hotjar) (www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). With Hotjar it is possible to measure and analyse the usage behaviour (clicks, mouse movements, scroll levels, etc.) on our website. The information generated by the tracking code and cookie about your visit to our website is transmitted to the Hotjar servers in Ireland and stored there. The tracking code collects the following information:
The following information can be recorded by your device and your browser:
- The IP address of your device (collected and stored in an anonymous format)
- Your e-mail address, including your first and last name, provided you have made it available through our website
- Screen size of your device
- Device type and browser information
- Geographical point (only the country)
- The preferred language to display our website
- Log data
The following data is automatically generated by our servers when Hotjar is used Referring domain Visited pages Geographical point (only the country) The preferred language to display our website Date and time of access to the website
Hotjar will use this information to analyse your use of our website, to produce reports of use, as well as other services related to the website use and internet analysis of the website. Hotjar also uses third-party services such as Google Analytics and Optimizely to provide services. These third parties may store information that your browser sends during your visit to the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy policies.
By continuing to use this site, you consent to the above processing of the data by Hotjar and its third parties under their privacy policies.
The cookies that Hotjar uses have different lifetimes; some stay for up to 365 days, some only remain valid during the current visit.
You can prevent the collection of data by Hotjar by clicking on the following link and follow the instructions there: https://www.hotjar.com/opt-out.
IV. Online Marketing
We have integrated components of Google Remarketing on our website.
Google Remarketing is a feature of Google AdWords that enables a company to show advertisements to Internet users who have previously visited the company’s website. The integration of Google Remarketing therefore enables a company to create user-related advertisements and consequently to display interest-relevant advertisements to the Internet user.
The operator of Google Remarketing services is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements on the Google Advertising Network or on other websites that are tailored to the individual needs and interests of Internet users.
Google Remarketing places a cookie in your system. This enables the visitor to our website to be recognized when he or she subsequently visits websites that are also members of the Google advertising network. Every time you visit a website on which the Google Remarketing service is integrated, your Internet browser automatically identifies itself with Google. The cookie is used to store personal information, such as the websites you visit. Accordingly, personal data, including your IP address, is transferred to Google in the United States of America each time you visit our Internet pages. This personal data is stored by Google in the United States of America. Google may disclose personal data collected via the technical process to third parties.
You can prevent the setting of cookies at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies.
Furthermore, the data subject has the possibility to object to interest-based advertising by Google. Please use the following link: www.google.de/settings/ads.
We have integrated components of the company DoubleClick by Google on our website.
DoubleClick is a brand by Google, under which mainly special online marketing solutions are marketed to advertising agencies and publishers.
The operating company of DoubleClick by Google is Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
DoubleClick by Google transfers data to the DoubleClick server with every impression, click, or other activity. Each of these data transfers triggers a cookie request to your browser. If the browser accepts this request, DoubleClick sets a cookie in your system. The purpose of the cookie is to optimise and display advertising. The cookie is used, among other things, to switch between and display user-relevant advertisements, as well as to generate reports on advertising campaigns or to improve them. Furthermore, the cookie is used to avoid multiple displays of the same advertising.
DoubleClick uses a cookie ID that is required to execute the technical process. For example, the cookie ID is needed to display an advertisement in a browser. DoubleClick can also use the cookie ID to record which advertisements have already appeared in a browser to avoid duplication. DoubleClick can also track conversions using the cookie ID. Conversions are tracked, for example, when a user has previously been shown a DoubleClick advertisement and then, with the same internet browser, makes a purchase on the advertiser’s website.
A DoubleClick cookie does not contain any personally identifiable information. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign identifier identifies the campaigns the user has already been in contact with.
Each time you visit one of the pages on our website that incorporates a DoubleClick component, your Internet browser is automatically prompted by the DoubleClick component to submit data to Google for online advertising and commission billing purposes. As part of this technical process, Google is informed of data that Google uses to create commission billing. Google understands, among other things, that you have clicked on certain links on our website.
You can prevent the setting of cookies at any time by means of an appropriate setting of the Internet browser used and thus permanently opt out of the setting of cookies. In addition, cookies already set by Google can be deleted at any time via an internet browser or other software programs.
On our website, we use plug-ins from the photo service Flickr. This is a service by Yahoo! Inc., 701 First Avenue, Sunnyvale, CA 94089, USA.
Flickr images are loaded by our server (not the visitor’s browser) from Flickr – so Flickr does not know who is visiting our websites.
As part of our internet presence, we use various plug-ins, such as Adminimize or Advanced Custom Fields Pro. These plug-ins do not collect, store or process personally identifiable information.
VII. Payment methods
We have integrated components of the company Klarna on our website.
Klarna is an online payment service provider that allows you to purchase on account or make flexible instalment payments. In addition, Klarna offers other services such as buyer protection or identity and credit checks.
The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.
If you select either the “purchase on account” or “instalment purchase” as a payment option during the ordering process in our online shop, your data will automatically be transmitted to Klarna. By selecting one of these payment options, you consent to the transfer of personal data necessary for the processing of the purchase on account or instalment purchase or for identity and credit checks.
The personal data transmitted to Klarna is usually first name, last name, address, date of birth, sex, e-mail address, IP address, telephone number, mobile phone number and other data required to process a purchase on account or instalment purchase. Personal data in connection with the respective order is also necessary for the execution of the purchase contract. In particular, there may
be reciprocal exchanges of payment information, such as bank details, card number, expiry date and CVC code, number of items, item number, data on goods and services, prices and tax deductions, information on previous purchasing behaviour or other information regarding your financial situation.
In particular, the purpose of the data transmission is identity verification, payment administration and fraud prevention. We will send Klarna personal data, especially if there is a legitimate interest for the transmission. The personal data exchanged between Klarna and us are transmitted by Klarna to credit reference agencies. The purpose of this transmission is the identity and credit check.
Klarna also gives the personal data to affiliated companies (Klarna Group) and service providers or subcontractors insofar as this is necessary to fulfil the contractual obligations or if the data is to be processed by proxy.
To decide on the establishment, implementation or termination of a contractual relationship, Klarna collects and uses data and information about your previous payment behaviour as well as probability values for your behaviour in the future (so-called scoring). The calculation of the scoring is carried out on the basis of scientifically recognised mathematical and statistical methods.
You have the option of revoking your consent to the handling of personal data with respect to Klarna at any time. A revocation has no effect on personal data which absolutely must be processed, used or transmitted for (contractual) payment processing.
Instant bank transfer
We have integrated components of instant bank transfer on our website.
Instant bank transfer is a payment service that enables cashless payment of products and services on the Internet. Instant bank transfer represents a technical procedure by which the online merchant immediately receives a confirmation of payment. This enables a merchant to deliver goods, services or downloads to the customer immediately after placing the order.
The operating company of instant bank transfer is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany.
If you select instant bank transfer as your payment option during the order process in our online shop, your data will be automatically transferred to SOFORT GmbH. By selecting this payment option, you consent to the transfer of personal data required for payment processing.
In the case of purchase transactions via direct bank transfer, the buyer transmits the PIN and the TAN to Sofort GmbH. SOFORT GmbH then carries out a transfer to the online merchant after a technical check of the account balance and retrieval of further data to check the account cover. The execution of the financial transaction is then automatically communicated to the online merchant.
The personal data exchanged by instant bank transfer is first name, surname, address, e-mail address, IP address, telephone number, mobile phone number or other data required for payment processing. The purpose of data transmission is to process payments and prevent fraud. The controller will immediately transfer other personal data even if there is a legitimate interest in the transfer. The personal data exchanged between SOFORT GmbH and the controller may be transferred by SOFORT GmbH to credit agencies. The purpose of this transmission is to verify identity and creditworthiness.
SOFORT GmbH transmits the personal data to affiliated companies and service providers or subcontractors if this is necessary to fulfil the contractual obligations or if the data is to be processed on behalf of the company.
You have the possibility to revoke your consent to the handling of personal data at any time. A revocation does not affect personal data which must be processed, used or transmitted for (contractual) payment processing.
The applicable data protection provisions of SOFORT GmbH can be found at https://www.sofort.com/ger-DE/datenschutzerklaerung-sofort-gmbh/
Hinweis auf Zweck der Datenerhebung bei Buchungen über die Webseite
For the processing of bookings via our website, the personal data required for the implementation of the booking is collected. This is usually first name, last name, address, date of birth, sex, e-mail address, IP address, telephone number, mobile phone number and other data required to process the booking. Personal data in connection with the respective booking is also necessary for the processing of the booking. In particular, there may be reciprocal exchanges of payment information, such as bank details, card number, expiry date and CVC code, prices and tax deductions, information on previous purchasing behaviour or other information regarding your financial situation.
In particular, the purpose of the data transmission is identity verification, payment administration and fraud prevention. The purpose of the data collection is therefore the fulfilment of (pre-)contractual obligations pursuant to Art. 6 para. 1 letter b of the GDPR.
VIII. Purposes and legal basis of processing activities, processor, passing on data to third parties in third countries
We shall only use your personal data provided to us for the purposes for which they are intended. The legal basis for processing of your data may specifically be preparation and processing of a contract, advertising, quality assurance, fraud prevention or keeping statistics.
Another legal basis for processing of your data may be consent given by you for use and forwarding of your personal data. You may withdraw your consent informally again at any time.
Personal data shall only be transmitted to state facilities and authorities based on mandatory national provisions. The persons charged by us with processing of the data are obligated to secrecy and lawful processing of the data. In case of further processing of your personal data for any other purpose than the initial one, we will inform you accordingly.
We use support from external service providers (processors) for certain technical processes concerning data analysis, processing and/or storage.
Both we and the processor are obligated to comply with the technically-organisational measures according to sect. 32 GDPR and the external service provider is obligated to confidentiality in addition to this. Processing takes place only on our order and upon our instruction. Processing of your personal data beyond these processing activities shall only take place with your explicit consent or in the cases required by authority or court.
Data transmission to third countries (countries outside of the European Economic Area – EEA) shall only take place as far as this is necessary to perform the contract, required by law or if you have given your consent to this. We will inform you separately concerning any details if required by law.
IX. Duration of data storage
We store the personal data collected by you from the time of their collection. The data collected in this manner are stored by us for the term of our business relationship, among others comprising the initiation and processing of a contract. Beyond this, we are subject to different storage and documentation obligations by law applicable to us. Finally, the storage duration in light of the possibility of defending against legal claims is also determined according to the statutory expiration periods.
X. Rights of the data subject (information for data subjects according to chapter 3 GDPR)
You as the data subject have the following rights:
- the right to access according to sect. 15 GDPR
- the right to rectification according to sect. 16 GDPR
- the right to erasure according to sect. 17 GDPR
- the right to restriction of processing of the data to specific purposes according to sect. 18 GDPR
- the right to data portability according to sect. 20 GDPR and
- the right to object to processing of personal data according to sect. 21 GDPR.
Beyond this, you have the right to complain to a data protection authority according to sect. 77 GDPR.
XI. Contact and data protection officer
This data privacy statement shall apply to the website of
arcona Management GmbH
Steinstraße 9, 18055 Rostock
Tel.: +49 381 45 85 110
Fax: +49 381 45 85 108
You can reach our data protection officer as follows:
ECOVIS Grieger Mallison Rechtsanwälte PartG mbB
Rechtsanwalt Axel Keller / Rechtsanwältin Susann Harder
Am Campus 1 – 11, 18182 Rostock-Bentwisch
Tel.: +49 381 649210