Privacy Policy

Introduction and general information

Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on the handling of your data that is collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.

Controller within the meaning of the GDPR

Murnauer Markenvertrieb GmbH
Hans-Fleissner-Strasse 80
63329 Egelsbach
Phone +49 – 6103 / 5717-100
E-mail: kundenservice@salthouse-natural-minerals.de

Contact details of the data protection officer

Proliance GmbH / www.datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de

When contacting the data protection officer, please state the company to which your enquiry relates. Please refrain from enclosing sensitive information, such as a copy of your ID, with your enquiry.

Definitions

Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are explained in Art. 4 GDPR.

Access to and storage of information in terminal equipment

By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 para. 1 sentence 1, para. 2 no. 2 TTDSG.

In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

Web hosting

This website is hosted by an external service provider (INSIGMA IT-Engineering GmbH). This website is hosted in Frechen/Germany. Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact enquiries, meta and communication data, website access and other data generated via a website.

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.

Server log files

When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• (Full) IP address of the requesting computer
• Date and time of the request or retrieval
• Time zone difference to Greenwich Mean Time (GMT)
• Requested URL or name of the requested file
• Page from which the URL or file was accessed (referrer URL)
• Access status / HTTP status code
• Web browser used and browser version
• Operating system used
• Amount of data transferred
• Recipient email address and sender email address, if an email is sent to the visitor

We collect the data listed in order to ensure a smooth connection to the website and the technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the website available to you. The log files are used to analyse system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After 14 days at the latest, the data is anonymised or deleted by shortening the IP address at domain level so that it is no longer possible to establish a reference to the individual user.

Matomo Analytics

We use the functions of Matomo Analytics to improve the technical function and user experience of our website. All data is collected, utilised and stored exclusively on the web server operated by us. The storage takes place on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is truncated. The IP address transmitted by your browser as part of Matomo Analytics is not merged with other data.

Objection to data collection

You can prevent the collection of your data by Matomo Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data on future visits to this website:

You have the option to prevent actions you take here from being analysed and linked. This will protect your privacy, but will also prevent the owner from learning from your actions and improving usability for you and other users.

Opt-out complete; your visits to this website will not be recorded by the Web Analytics tool. Note that if you clear your cookies, delete the opt-out cookie, or if you change computers or Web browsers, you will need to perform the opt-out procedure again.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

You are not opted out. Uncheck this box to opt-out. You are currently opted out. Check this box to opt-in.

The tracking opt-out feature requires cookies to be enabled.

Cookies

Our website uses so-called “cookies”. Cookies are small text files that are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or they are automatically deleted by your web browser.

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or language settings). Other cookies are used to evaluate user behaviour or to display advertising.

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the information on the specific data processing.

The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimisation purposes, we will inform you about this separately in this privacy policy and obtain your consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can set your browser so that you

• be informed about the setting of cookies,
• only allow cookies in individual cases,
• exclude the acceptance of cookies for certain cases or in general,
• activate the automatic deletion of cookies when closing the browser.

The cookie settings can be managed for the respective browsers under the following links:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

You can also manage cookies from many companies and functions that are used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called “do-not-track function”. If this function is activated, the respective browser informs advertising networks, websites and applications that you do not wish to be “tracked” for the purpose of behaviour-based advertising and the like.

Information and instructions on how to edit this function can be found under the following links, depending on your browser provider:

• Google Chrome
• Mozilla Firefox
• Edge (Microsoft)
• Safari
• Opera

You can also prevent scripts from loading by default. “NoScript” only allows the execution of JavaScripts, Java and other plug-ins on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that deactivating cookies may limit the functionality of our website.

Change cookie settings

You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again via this link:

Change cookie settings

What types of cookies are there?

Your cookie selection history

Cookies used by us

Opt-out Google Tag Manager

Opt-out Google Analytics

Contact form and contact by phone

If you send us enquiries via the contact form or telephone, your details from the enquiry form or telephone call, including the personal data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. It is necessary to provide an e-mail address to contact us; providing your first name, surname and telephone number is voluntary. We will never pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract. Your data will be deleted after final processing of your enquiry, provided that there are no statutory retention obligations to the contrary. In the case of Art. 6 para. 1 lit. f GDPR, you can object to the processing of your personal data at any time.

Blog function

As a user of our website, you have the opportunity to leave comments on individual content in our blog. To do this, we need your name or a pseudonym and your e-mail address (will not be published). Your IP address and the time of publication will also be logged and stored for 14 days. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by leaving a comment. We need your e-mail address in order to contact you if a third party objects to your published content as unlawful.

The comments are stored on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

The storage of additional information (IP address and e-mail address) is based on our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties. The IP addresses collected are deleted after 14 days.

If you would like us to delete one of your published comments, please contact us.

Writing reviews

On our website you have the opportunity to write reviews of our products. For this we need your name or a pseudonym and your e-mail address (will not be published). Furthermore, your IP address and the time of publication will be logged and stored for 14 days. The IP address and e-mail address are stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content by posting a comment.

Reviews can be submitted in such a way that it is not possible for other website users to identify you personally. You are free to decide whether you wish to provide information about yourself over and above the mandatory information. Please note that when choosing your pseudonym, as well as within the free text fields and when uploading photos, it is also possible to provide information that allows your person to be identified. We recommend that you write your review text without providing personal data and design photos accordingly. We reserve the right not to publish or (partially) anonymise reviews that contain personal data.

If the review contains personal data, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time. All you need to do is send us an informal email. The legality of the data processing operations that have already taken place remains unaffected by the revocation. If you withdraw your consent, we will delete or anonymise the review.

The storage of additional information (IP address and e-mail address) is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the possibility of assigning the reviews to the authors. We reserve the right to delete comments if they are objected to by third parties as unlawful.

External links

Social networks (Facebook, Instagram) are only integrated on our website as links to the corresponding services. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. User information is only transferred to the respective provider after you have been redirected. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers you use.

Appearances in social media

Below you will find information on the handling of your data that is collected through your use of our social media presence on social networks and platforms. Your data is processed in accordance with the statutory regulations.

1. provider

1.1 Facebook fan page

1.1.1 Responsible body

In the event that the data you provide to us is also or exclusively processed by Facebook, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland, is responsible for data processing within the meaning of the GDPR in addition to us or in our place. For this purpose, we have concluded an agreement with Facebook pursuant to Art. 26 GDPR on joint responsibility for the processing of data (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

Since personal data is transferred by Facebook to Meta Platforms Inc. in the USA, among others, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For this purpose, the provider uses standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

If you, as a visitor to the site, would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or cancellation), you can contact both Facebook and us.

You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in:

https://www.facebook.com/settings?tab=adsor http://www.your onlinechoices.com

For further details, please refer to Facebook’s privacy policy: https://www.facebook.com/about/privacy/

1.1.2 Data protection officer of Facebook

To contact Facebook’s data protection officer, you can use the online contact form provided by Facebook at the following link https://www.facebook.com/help/contact/540977946302970.

1.1.3 Data processing for statistical purposes using Page Insights

Facebook provides so-called Page Insights for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. This is summarised data that provides information about how people interact with our page. Page Insights may be based on personal data that is collected in connection with a visit or interaction of people on or with our page and in connection with the content provided. Please note which personal data you share with us via Facebook. Your data may be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. For example, user profiles can be created from user behaviour and the resulting interests of users. The user profiles can in turn be used, for example, to place adverts inside and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies that are stored on your end device. Furthermore, data that is independent of the devices used by the users may also be stored in the user profiles, especially if the users are members of the respective platforms and are logged in to them. The legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. Please note that we have no influence on data collection and further processing by Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook fulfils existing deletion obligations, which evaluations and links are made with the data by Facebook and to whom the data is passed on by Facebook. If you wish to avoid the processing of your personal data by Facebook, please contact us by other means.

1.2 Other social media providers

1.2.1 Responsible body

If your personal data is processed by a provider listed below, this provider is responsible for data processing within the meaning of the GDPR. When asserting your rights as a data subject, we would like to point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. If you still need help, please feel free to contact us at any time.

We have online presences on the social media platforms of the following providers:

• Instagram, Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland

1.2.2 Data protection officer

Information on how to contact the data protection officer of the other social media providers can be found here:

• Instagram Inc: https://de-de.facebook.com/help/instagram/155833707900388

2. general information on social media platforms

2.1 Responsible body

The controller for data processing within the meaning of the GDPR is the entity named at the beginning of this privacy policy, insofar as data transmitted by you via one of the social media platforms is processed by us.

2.2 Our data protection officer

If you have any concerns about data processing carried out by us as the controller, you can contact our data protection officer using the contact details given at the beginning of this privacy policy.

3. general data processing on the social media platforms

3.1 Data processing for market research and advertising

As a rule, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognise you when you visit a website. The collected data can be used to create user profiles. These are used to place adverts inside and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the user profiles independently of the devices you use. This is regularly the case if you are a member of the respective platforms and are logged in to them.

3.2 Data processing when contacting us

We collect personal data ourselves when you contact us, for example via a contact form or a messenger service such as Facebook Messenger. Which data is collected depends on the information you provide and the contact details you provide or share. This data is stored by us for the purpose of processing the enquiry and in the event of follow-up questions. Under no circumstances will we pass the data on to third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your enquiry in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your enquiry is aimed at concluding a contract. Your data will be deleted after final processing of your enquiry, provided that there are no statutory retention obligations to the contrary. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

3.3 Data processing for contract fulfilment

If your contact via a social network or other platform is aimed at concluding a contract for the delivery of goods or the provision of services with us, we process your data to fulfil the contract or to carry out pre-contractual measures or to provide the desired services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it is no longer required for the fulfilment of the contract or if it is clear that the pre-contractual measures will not lead to the conclusion of a contract corresponding to the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after conclusion of the contract in order to fulfil contractual or legal obligations.

3.4 Data processing based on consent

If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. Any consent given can be revoked at any time with effect for the future.

4 Data transfer and recipients

When visiting and using the platforms listed above, personal data may be transferred to the USA or other third countries outside the EU, which is why further protective mechanisms are required in these cases to ensure the level of data protection provided by the GDPR. Further information on whether and which suitable guarantees the providers can provide for this can be found in the list below.

We have no influence on the processing of your personal data by the provider and how it is handled. We also have no information on this. For further information, please check the privacy policy of the respective provider and, if necessary, use the opt-out / personalisation options with regard to data processing by the provider:

• Instagram
  • Privacy policy/opt-out: http://instagram.com/about/legal/privacy/
  • According to the privacy policy, Instagram (Facebook) uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: http://instagram.com/about/legal/privacy/

YouTube

On our website, we embed videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). The legal basis for the processing of your personal data is your consent given in accordance with Art. 6 para. 1 lit. a GDPR.

If the playback of embedded YouTube videos is started with your consent, the provider “YouTube” uses cookies to collect information about user behaviour. According to information from “YouTube”, these are used, among other things, to collect video statistics, improve user-friendliness and prevent abusive behaviour. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores this data as usage profiles and uses it for the purposes of advertising, market research and/or customising its websites. Such an analysis is carried out in particular (even for users who are not logged in) to display customised advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.

Since personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

Further information on data protection and data use by Google can be found on the following Google website:

https://policies.google.com/privacy?hl=de&gl=de

Consent Management (Borlabs)

In order to be able to manage cookies in compliance with data protection regulations, we use the software solution from Borlabs- Benjamin A. Bornschein, Georg- Wilhelm-Str. 17, 21107 Hamburg, Germany.

When you visit our website, an essential cookie is stored in the user’s browser, in which the consent given or the revocation of consent is stored. This data is not passed on to the provider of Borlabs Cookie.

With Borlabs, we provide you with a so-called cookie banner, which you can use to give us your consent to the use of cookies. The cookie banner informs you about the use of cookies when you first visit our website and asks for your consent to the use of cookies. Until you give your consent, all non-essential cookies that we use on our website are automatically blocked. You have the option of rejecting unwanted cookies via the cookie banner and still continuing to use the website.

The Borlabs cookie in particular is necessary in order to comply with the legal requirements of data protection law. We do not use the user data collected by the cookies to create user profiles. The legal basis for the processing is our legitimate interest in observing the rejection of cookies and/or the revocation of your consent to the use of cookies in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

The data collected will be stored until you ask us to delete it or delete the Borlabs cookie yourself or until the purpose for data storage no longer applies. Mandatory statutory retention periods remain unaffected. Details on data processing by Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

You can find Borlabs’ privacy policy here: https://de.borlabs.io/datenschutz/

Google Analytics

Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”.

Google will use this information on behalf of the operator of this website to analyse your use of the website and to compile reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the internet. The IP address sent by your browser as part of Google Analytics will not be combined with other Google data. Processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent.

We only use Google Analytics with activated IP anonymisation. This means that your IP address is only processed by Google in abbreviated form.

We have concluded an order processing contract with the service provider in which we oblige them to protect our customers’ data and not to pass it on to third parties.

As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

The Google Analytics terms of use and information on data protection can be accessed via the following links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. Data at user and event level that is linked to cookies, user IDs and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple ID for advertisers]) is deleted no later than 14 months after it is collected.

You can prevent the storage of cookies by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of this website without restriction. You can also prevent Google from collecting the data generated by the cookie and analysing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout?hl=de.

Google Maps

Our website uses the online map service provider Google Maps via an interface. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The provider of the map service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to save your IP address.

Google uses cookies to collect information about user behaviour. The legal basis for the processing of your personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Since personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

Further information on the handling of user data can be found in Google’s privacy policy:

https://www.google.de/intl/de/policies/privacy/
Opt-out: https://www.google.com/settings/ads/

Google Fonts

We use “Google Fonts” on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as: “Google”). Google Fonts enables us to use external fonts. For this purpose, the required Google Fonts are loaded into your browser cache by your web browser when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. These Google fonts are integrated by a server call, usually a Google server in the USA. This tells the server which page of our website you have visited. The IP address of the browser of the visitor’s end device is also stored by Google.

We use Google Fonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the consent you have given. This consent can be revoked at any time with effect for the future.

Since personal data is transferred to the USA, further protective mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

Further information on data protection can be found in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy.

Further information on Google Fonts can be found at https://fonts.google.com/

Facebook Custom Audiences

We use “Facebook Custom Audiences” on our website, a remarketing tool from Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter referred to as “Facebook”).

Facebook Custom Audiences enables us to display interest-based adverts, so-called “Facebook Ads”, to visitors to our website when they visit the Facebook social network or other websites that also use Facebook Custom Audiences. A pixel (Facebook Pixel) from the provider of the same name, Facebook (see above), is used for this purpose.

Facebook Pixel enables Facebook to display our adverts on Facebook, so-called “Facebook Ads”, only to those Facebook users who have visited our website, in particular those who have shown an interest in our online offering. In this case, Facebook Pixel also makes it possible to check whether a user was redirected to our website after clicking on our Facebook ads. Among other things, Facebook Pixel uses cookies, i.e. small text files that are stored locally in the cache of your web browser on your end device. If you are logged in to Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user. However, this data can be linked by Facebook to your user account there. If you have a user account with Facebook and are registered, Facebook can assign the visit to your user account.

By using “Facebook Custom Audiences” in conjunction with Facebook Pixel, your web browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further use of the data collected by Facebook through the use of Facebook Custom Audiences. To the best of our knowledge, Facebook receives the information that you have accessed the relevant part of our website or clicked on one of our adverts. If you have a Facebook user account and are registered, Facebook can assign the visit to your user account. Even if you are not registered with Facebook or have not logged in, it is possible for Facebook to find out and store your IP address and any other identifying features.

We use Facebook Custom Audiences for marketing and optimisation purposes, in particular to display ads that are relevant and interesting for you and thus improve our offering and make it more interesting for you as a user. The legal basis for Facebook Custom Audiences and the Facebook pixel is Art. 6 para. 1 sentence 1 lit. a GDPR (consent).

We have concluded an order processing contract with our service provider Facebook, in which we oblige it to protect our customers’ data and not to pass it on to third parties.

As personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

Further information from Facebook on data protection can be found on the following Facebook website: https://www.facebook.com/about/privacy

Information on Facebook Pixel can be found on the following Facebook website: https://www.facebook.com/business/help/651294705016616

The deactivation of Facebook Custom Audiences via pixel is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_

In addition, you can deactivate cookies that are used for reach measurement and advertising purposes via the following websites
http://optout.networkadvertising.org/
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/

Please note that this setting will also be deleted if you delete your cookies.

Google Marketing Platform (DoubleClick)

This website uses DoubleClick of the Google Marketing Platform, a service of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (“Google”).

DoubleClick uses cookies to present you with adverts that are relevant to you. A pseudonymous identification number (ID) is assigned to your browser or device in order to check which adverts have been displayed in your browser and which adverts have been viewed. This can improve campaign performance or, for example, prevent you from seeing the same advert more than once. In addition, Google can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager advert and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, the cookies do not contain any personal information. If you have given us your consent, the data is processed on the basis of Art. 6 para. 1 lit. a GDPR.

Due to the technology used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our level of knowledge: By integrating DoubleClick, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out your IP address and store it.

Since personal data is transferred to the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, Google uses standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

Further information on the Google Marketing Platform can be found at https://marketingplatform.google.com/about/ and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy.

Google Tag Manager

This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and only the user’s IP address is transmitted to Google to establish a connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, it will remain in place for all tracking tags if they are implemented with Google Tag Manager.

We use Google Tag Manager on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Since the IP address is transferred to Google in the USA, further protective mechanisms are required to ensure the level of data protection required by the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

MyFonts

We use “MyFonts” on our website, a service provided by MyFonts Inc, 500 Unicorn Park Drive, Woburn, MA 01801, USA.

MyFonts enables us to use external fonts. For this purpose, the required fonts are loaded from your web browser into your browser cache when you access our website. This is necessary so that your browser can also display a visually improved presentation of our texts. If your browser does not support this function, a standard font from your computer will be used for display. These fonts are integrated by a server call, usually a server in the USA. This tells the server which page of our website you have visited. The IP address of the browser of the visitor’s device is also stored by MyFonts. The following data may also be collected: URL of the website visited, date and time of access, browser.

We use MyFonts for optimisation purposes, in particular to improve the use of our website for you and to make its design more user-friendly. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your consent. This consent can be revoked at any time with effect for the future.

Since personal data is transferred to the USA, further protective mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavour to obtain additional regulations and assurances from the recipient in the USA.

Further information on data protection can be found in MyFonts’ privacy policy: https://www.myfonts.com/legal/website-use-privacy-policy.

Data transfer and recipients

Your personal data will not be transferred to third parties unless

• if we have explicitly indicated this in the description of the respective data processing,
• if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
• insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.

We also use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing contracts in accordance with Art. 28 GDPR if necessary. These service providers are bound by our instructions and are regularly monitored by us. These include service providers for hosting, sending emails, maintenance and servicing of our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

In accordance with Art. 32 GDPR, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of storage of personal data

The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for contract fulfilment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you exercise your right of revocation or objection.

Your rights

Below you will find information on the data subject rights that the applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.

The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.

The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.

The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR.

The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller in accordance with Art. 20 GDPR.

The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

The right to withdraw consent granted in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.

If you wish to exercise your right of cancellation or objection, simply send an email to datenschutzbeauftragter@datenschutzexperte.de or kundenservice@salthouse.de.

Legal obligations

The provision of personal data for the decision on the conclusion of a contract, the fulfilment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfilment of the contract or pre-contractual measures.

Automated decision-making

Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.

Subject to change

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The current version applies to your visit.

Status of this privacy policy: 13.04.2022