Reset cookie settings

4. Collection of general data and information

The website of the Walberg Urban Electrics GmbH collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) any other similar data and information that may be used in the event of attacks on our information technology systems. 

When using these general data and information, the Walberg Urban Electrics GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, the Walberg Urban Electrics GmbH analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise, and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

5. Registration on our website

The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data are transmitted to the controller is determined by the respective input mask used for the registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes. The controller may request transfer to one or more processors (e.g. a parcel service) that also uses personal data for an internal purpose which is attributable to the controller. 

By registering on the website of the controller, the IP address&mdashassigned by the Internet service provider (ISP) and used by the data subject&mdashdate, and time of the registration are also stored. The storage of this data takes place against the background that this is the only way to prevent the misuse of our services, and, if necessary, to make it possible to investigate committed offenses. Insofar, the storage of this data is necessary to secure the controller. This data is not passed on to third parties unless there is a statutory obligation to pass on the data, or if the transfer serves the aim of criminal prosecution. 

The registration of the data subject, with the voluntary indication of personal data, is intended to enable the controller to offer the data subject contents or services that may only be offered to registered users due to the nature of the matter in question. Registered persons are free to change the personal data specified during the registration at any time, or to have them completely deleted from the data stock of the controller. 

The data controller shall, at any time, provide information upon request to each data subject as to what personal data are stored about the data subject. In addition, the data controller shall correct or erase personal data at the request or indication of the data subject, insofar as there are no statutory storage obligations. The entirety of the controller’s employees are available to the data subject in this respect as contact persons.

6. Subscription to our newsletters

On the website of the Walberg Urban Electrics GmbH, users are given the opportunity to subscribe to our enterprise's newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller. 

The Walberg Urban Electrics GmbH informs its customers and business partners regularly by means of a newsletter about enterprise offers. The enterprise's newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter. 

During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of the e-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller. 

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of modifications to the newsletter offer, or in the event of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for shipping the newsletter, may be revoked at any time. For the purpose of revocation of consent, a corresponding link is found in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the controller, or to communicate this to the controller in a different way.

7. Newsletter-Tracking

The newsletter of the Walberg Urban Electrics GmbH contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the Walberg Urban Electrics GmbH may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects. 

Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. These personal data will not be passed on to third parties. Data subjects are at any time entitled to revoke the respective separate declaration of consent issued by means of the double-opt-in procedure. After a revocation, these personal data will be deleted by the controller. The Walberg Urban Electrics GmbH automatically regards a withdrawal from the receipt of the newsletter as a revocation.

Service provider: Newsletters are sent via "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA. A contract has been concluded with the Rocket Science Group on the basis of the EU standard contract clause and thus offers a guarantee that the European level of data protection is observed.

8. Contact possibility via the website

The website of the Walberg Urban Electrics GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There is no transfer of this personal data to third parties.

9. Comments function in the blog on the website

The Walberg Urban Electrics GmbH offers users the possibility to leave individual comments on individual blog contributions on a blog, which is on the website of the controller. A blog is a web-based, publicly-accessible portal, through which one or more people called bloggers or web-bloggers may post articles or write down thoughts in so-called blogposts. Blogposts may usually be commented by third parties. 

If a data subject leaves a comment on the blog published on this website, the comments made by the data subject are also stored and published, as well as information on the date of the commentary and on the user's (pseudonym) chosen by the data subject. In addition, the IP address assigned by the Internet service provider (ISP) to the data subject is also logged. This storage of the IP address takes place for security reasons, and in case the data subject violates the rights of third parties, or posts illegal content through a given comment. The storage of these personal data is, therefore, in the own interest of the data controller, so that he can exculpate in the event of an infringement. This collected personal data will not be passed to third parties, unless such a transfer is required by law or serves the aim of the defense of the data controller.

10. Routine erasure and blocking of personal data

The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject to. 

If the storage purpose is not applicable, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data are routinely blocked or erased in accordance with legal requirements.

11. Rights of the data subject

a) Right of confirmation 

Each data subject shall have the right granted by the European legislator to obtain from the controller the confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself of this right of confirmation, he or she may, at any time, contact any employee of the controller. 

b) Right of access 

Each data subject shall have the right granted by the European legislator to obtain from the controller free information about his or her personal data stored at any time and a copy of this information. Furthermore, the European directives and regulations grant the data subject access to the following information: 

Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or to an international organisation. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject wishes to avail himself of this right of access, he or she may, at any time, contact any employee of the controller. 

c) Right to rectification 

Each data subject shall have the right granted by the European legislator to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement. 

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact any employee of the controller. 

d) Right to erasure (Right to be forgotten) 

Each data subject shall have the right granted by the European legislator to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies, as long as the processing is not necessary: 

If one of the aforementioned reasons applies, and a data subject wishes to request the erasure of personal data stored by the Walberg Urban Electrics GmbH, he or she may, at any time, contact any employee of the controller. An employee of Walberg Urban Electrics GmbH shall promptly ensure that the erasure request is complied with immediately.

Where the controller has made personal data public and is obliged pursuant to Article 17(1) to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested erasure by such controllers of any links to, or copy or replication of, those personal data, as far as processing is not required. An employees of the Walberg Urban Electrics GmbH will arrange the necessary measures in individual cases. 

e) Right of restriction of processing 

Each data subject shall have the right granted by the European legislator to obtain from the controller restriction of processing where one of the following applies: 

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by the Walberg Urban Electrics GmbH, he or she may at any time contact any employee of the controller. The employee of the Walberg Urban Electrics GmbH will arrange the restriction of the processing.

f) Right to data portability 

Each data subject shall have the right granted by the European legislator, to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used and machine-readable format. He or she shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR, or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. 

Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) of the GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others. 

In order to assert the right to data portability, the data subject may at any time contact any employee of the Walberg Urban Electrics GmbH. 

g) Right to object 

Each data subject shall have the right granted by the European legislator to object, on grounds relating to his or her particular situation, at any time, to processing of personal data concerning him or her, which is based on point (e) or (f) of Article 6(1) of the GDPR. This also applies to profiling based on these provisions. 

The Walberg Urban Electrics GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims. 

If the Walberg Urban Electrics GmbH processes personal data for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing. This applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to the Walberg Urban Electrics GmbH to the processing for direct marketing purposes, the Walberg Urban Electrics GmbH will no longer process the personal data for these purposes. 

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to processing of personal data concerning him or her by the Walberg Urban Electrics GmbH for scientific or historical research purposes, or for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest. 

In order to exercise the right to object, the data subject may contact any employee of the Walberg Urban Electrics GmbH. In addition, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to use his or her right to object by automated means using technical specifications. 

h) Automated individual decision-making, including profiling 

Each data subject shall have the right granted by the European legislator not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, as long as the decision (1) is not is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is not authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or (3) is not based on the data subject's explicit consent. 

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) it is based on the data subject's explicit consent, the Walberg Urban Electrics GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision. 

If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact any employee of the Walberg Urban Electrics GmbH. 

i) Right to withdraw data protection consent 

Each data subject shall have the right granted by the European legislator to withdraw his or her consent to processing of his or her personal data at any time. 

If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact any employee of the Walberg Urban Electrics GmbH.

12. Data protection for applications and the application procedures

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically. This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).

13. Data protection provisions about the application and use of Facebook

On this website, the controller has integrated components of the enterprise Facebook. Facebook is a social network. 

A social network is a place for social meetings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences, or enable the Internet community to provide personal or business-related information. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests. 

The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. 

With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject. 

If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject&mdashand for the entire duration of their stay on our Internet site&mdashwhich specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the "Like" button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data. 

Facebook always receives, through the Facebook component, information about a visit to our website by the data subject, whenever the data subject is logged in at the same time on Facebook during the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made. 

The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.

14. Data protection provisions about the application and use of Google Analytics (with anonymization function)

On this website, the controller has integrated the component of Google Analytics (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, gathering, and analysis of data about the behavior of visitors to websites. A web analysis service collects, inter alia, data about the website from which a person has come (the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analytics are mainly used for the optimization of a website and in order to carry out a cost-benefit analysis of Internet advertising. 

The operator of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, United States. 

For the web analytics through Google Analytics the controller uses the application "_gat. _anonymizeIp". By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area. 

The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services concerning the use of our Internet site for us. 

Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. With the setting of the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the settlement of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements. 

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would also prevent Google Analytics from setting a cookie on the information technology system of the data subject. In addition, cookies already in use by Google Analytics may be deleted at any time via a web browser or other software programs. 

In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the chance to preclude any such. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics through a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of the browser add-ons is considered an objection by Google. If the information technology system of the data subject is later deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons. 

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics/terms/us.html. Google Analytics is further explained under the following Link https://www.google.com/analytics/.

15. Data protection provisions about the application and use of Google-Ads

On this website, the controller has integrated Google Ads. Google Ads is a service for Internet advertising that allows the advertiser to place ads in Google search engine results and the Google advertising network. Google Ads allows an advertiser to pre-define specific keywords with the help of which an ad on Google's search results only then displayed, when the user utilizes the search engine to retrieve a keyword-relevant search result. In the Google Advertising Network, the ads are distributed on relevant web pages using an automatic algorithm, taking into account the previously defined keywords. 

The operating company of Google Ads is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, UNITED STATES. 

The purpose of Google Ads is the promotion of our website by the inclusion of relevant advertising on the websites of third parties and in the search engine results of the search engine Google and an insertion of third-party advertising on our website. 

If a data subject reaches our website via a Google ad, a conversion cookie is filed on the information technology system of the data subject through Google. The definition of cookies is explained above. A conversion cookie loses its validity after 30 days and is not used to identify the data subject. If the cookie has not expired, the conversion cookie is used to check whether certain sub-pages, e.g, the shopping cart from an online shop system, were called up on our website. Through the conversion cookie, both Google and the controller can understand whether a person who reached an Ads ad on our website generated sales, that is, executed or canceled a sale of goods. 

The data and information collected through the use of the conversion cookie is used by Google to create visit statistics for our website. These visit statistics are used in order to determine the total number of users who have been served through AdWords ads to ascertain the success or failure of each Ads ad and to optimize our Ads ads in the future. Neither our company nor other Google Ads advertisers receive information from Google that could identify the data subject. 

The conversion cookie stores personal information, e.g. the Internet pages visited by the data subject. Each time we visit our Internet pages, personal data, including the IP address of the Internet access used by the data subject, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass these personal data collected through the technical procedure to third parties. 

The data subject may, at any time, prevent the setting of cookies by our website, as stated above, by means of a corresponding setting of the Internet browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a conversion cookie on the information technology system of the data subject. In addition, a cookie set by Google AdWords may be deleted at any time via the Internet browser or other software programs. 

The data subject has a possibility of objecting to the interest based advertisement of Google. Therefore, the data subject must access from each of the browsers in use the link www.google.de/settings/ads and set the desired settings. 

Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/.

16. Data protection provisions about the application and use of Instagram

On this website, the controller has integrated components of the service Instagram. Instagram is a service that may be qualified as an audiovisual platform, which allows users to share photos and videos, as well as disseminate such data in other social networks. 

The operating company of the services offered by Instagram is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which an Instagram component (Insta button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding Instagram component of Instagram. During the course of this technical procedure, Instagram becomes aware of what specific sub-page of our website was visited by the data subject. 

If the data subject is logged in at the same time on Instagram, Instagram detects with every call-up to our website by the data subject&mdashand for the entire duration of their stay on our Internet site&mdashwhich specific sub-page of our Internet page was visited by the data subject. This information is collected through the Instagram component and is associated with the respective Instagram account of the data subject. If the data subject clicks on one of the Instagram buttons integrated on our website, then Instagram matches this information with the personal Instagram user account of the data subject and stores the personal data. 

Instagram receives information via the Instagram component that the data subject has visited our website provided that the data subject is logged in at Instagram at the time of the call to our website. This occurs regardless of whether the person clicks on the Instagram button or not. If such a transmission of information to Instagram is not desirable for the data subject, then he or she can prevent this by logging off from their Instagram account before a call-up to our website is made. 

Further information and the applicable data protection provisions of Instagram may be retrieved under https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Privatsph%C3%A4re%20und%20

17. hotjar privacy policy

We use Hotjar by Hotjar Limited (Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta) on our website to statistically analyze visitor data. Hotjar is a service that analyzes the behavior and feedback of you, the user, on our website through a combination of analytics and feedback tools. We receive reports and visuals from Hotjar that show us where and how you "move" on our site. Personal data is automatically anonymized and never reaches Hotjar's servers. This means that you are not personally identified as a site user and we still learn a lot about your user behavior.

What is Hotjar?

As mentioned in the section above, Hotjar helps us analyze the behavior of our site visitors. These tools that Hotjar offers include heatmaps, conversion funnels, visitor recording, incoming feedback, feedback polls, and surveys (you can get more information about these at https://www.hotjar.com/). Thus, Hotjar helps us to provide you with a better user experience and service. So on the one hand it provides a good analysis about online behavior, on the other hand we also get a good feedback about the quality of our website. Because besides all the analysis aspects, of course we simply want to know your opinion about our website. And with the feedback tool, that's exactly what we can do.

Why do we use Hotjar on our website?

In recent years, the importance of user experience on websites has increased significantly. And for good reason. A website should be built in such a way that you, as a visitor, feel comfortable and find your way around easily. Thanks to Hotjar's analytics and feedback tools, we can make our website and our offer more attractive. Heatmaps from Hotjar prove to be particularly valuable for us. Heatmaps are a form of representation for the visualization of data. Through the heatmaps of Hotjar, we see, for example, very precisely what you like to click, tap and where you scroll.

What data does Hotjar store?

As you browse our website, Hotjar automatically collects information about your user behavior. In order to be able to collect this information, we have included our own tracking code on our website. The following information may be collected about your computer or browser:

IP address of your computer (collected and stored in an anonymous format).

Screen size

Browser info (which browser, which version, etc.)

Your location (but only the country)

Your preferred language setting

Visited web pages (sub-pages)

Date and time you accessed one of our subpages (web pages)

In addition, cookies also store data that is placed on your computer (usually in your browser). No personal data is collected in them. In principle, Hotjar does not pass on any collected data to third parties. However, Hotjar explicitly points out that it is sometimes necessary to share data with Amazon Web Services. Then parts of your information are stored on their servers. However, Amazon is bound by a confidentiality obligation not to disclose this data.

Only a limited number of people (Hotjar employees) have access to the stored information. The Hotjar servers are protected by firewalls and IP restrictions (access only to approved IP addresses). Firewalls are security systems that protect computers from unwanted network access. They are intended to serve as a barrier between Hotjar's secure internal network and the Internet. Furthermore, Hotjar also uses third-party companies, such as Google Analytics or Optimizely, for its services. These companies may also store information that your browser sends to our website.

The following cookies are used by Hotjar. Because we refer to the cookie list from Hotjar's privacy policy at https://www.hotjar.com/legal/policies/cookie-information, among other places, an exemplary value is not available for each cookie. The list shows examples of used Hotjar cookies and does not claim to be complete.

Name: ajs_anonymous_id

Value: %2258832463-7cee-48ee-b346-a195f18b06c3%22311160675-5

Purpose: The cookie is usually used for analytics purposes and helps count visitors to one of our websites by tracking whether they have been to that page before.

Expiration date: after one year

Name: ajs_group_id

Value: 0

Purpose: This cookie collects data about user behavior. This data can then be assigned to a specific visitor group based on commonalities among site visitors.

Expiration date: after one year

Name: _hjid

Value: 699ffb1c-4bfb-483f-bde1-22cfa0b59c6c

Purpose: The cookie is used to maintain a Hotjar user ID that is unique to the site in the browser. This allows user behavior to be associated with the same user ID on subsequent visits.

Expiration date: after one year

Name: _hjMinimizedPolls

Value: 462568311160675-8

Purpose: Whenever you minimize a Feedback Poll widget, Hotjar sets this cookie. The cookie ensures that the widget stays minimized when you browse our pages.

Expiration date: after one year

Name: _hjIncludedInSample

Value: 1

Purpose: This session cookie is set to inform Hotjar whether you are part of the selected people (sample) used to generate funnels.

Expiration date: after one year

Name: _hjClosedSurveyInvites

Purpose: This cookie is set when you see an invitation to a feedback survey via a pop-up window. The cookie is used to ensure that this invitation appears only once for you.

Expiration date: after one year

Name: _hjDonePolls

Purpose: As soon as you finish a feedback "question round" using the so-called Feedback Poll widget, this cookie is set in your browser. This prevents Hotjar from sending you the same polls again in the future.

Expiration date: after one year

Name: _hjDoneTestersWidgets

Purpose: This cookie is used as soon as you enter your data in the "Recruit User Tester Widget". With this widget we want to recruit you as a tester. So that this form does not appear again and again, the cookie is used.

Expiration date: after one year

Name: _hjMinimizedTestersWidgets

Purpose: To keep the "Recruit User Tester" minimized on all our pages once you have minimized it, this cookie is set.

Expiration date: after one year

Name: _hjShownFeedbackMessage

Purpose: This cookie is set when you have minimized or added to the incoming feedback. This is done so that the incoming feedback is immediately loaded as minimized when you navigate to another page where it should be displayed.

Expiration date: after one year

How long and where is the data stored?

We have a tracking code built into our website that is transmitted to Hotjar servers in Ireland (EU). This tracking code contacts Hotjar's servers and sends a script to your computer or device that you use to access our site. The script collects certain data related to your interaction with our website. This data is then sent to Hotjar's servers for processing. Hotjar has imposed on itself a 365-day data retention period. This means that all data collected by Hotjar that is older than one year is automatically deleted again.

How can I delete my data or prevent data storage?

Hotjar does not store any personal data from you for analysis. The company even advertises with the slogan "We track behavior, not individuals". You also always have the option to prevent the collection of your data. To do so, you just need to go to the "Opt-out page" and click on "Disable Hotjar". Please note that deleting cookies, using the private mode of your browser or using a different browser will cause data to be collected again. Furthermore, you can also activate the "Do Not Track" button in your browser. In the Chrome browser, for example, you have to click on the three bars in the top right corner and go to "Settings". There, in the "Privacy" section, you will find the option "Send a "Do Not Track" request with browser accesses". Now just enable this button and no data will be collected by Hotjar.

More details about the privacy policy and what data is collected by Hotjar and in what way can be found at https://www.hotjar.com/legal/policies/privacy?tid=311160675.

18. Payment Method: Data protection provisions about the use of PayPal as a payment processor

On this website, the controller has integrated components of PayPal. PayPal is an online payment service provider. Payments are processed via so-called PayPal accounts, which represent virtual private or business accounts. PayPal is also able to process virtual payments through credit cards when a user does not have a PayPal account. A PayPal account is managed via an e-mail address, which is why there are no classic account numbers. PayPal makes it possible to trigger online payments to third parties or to receive payments. PayPal also accepts trustee functions and offers buyer protection services. 

The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. 

If the data subject chooses "PayPal" as the payment option in the online shop during the ordering process, we automatically transmit the data of the data subject to PayPal. By selecting this payment option, the data subject agrees to the transfer of personal data required for payment processing. 

The personal data transmitted to PayPal is usually first name, last name, address, email address, IP address, telephone number, mobile phone number, or other data necessary for payment processing. The processing of the purchase contract also requires such personal data, which are in connection with the respective order. 

The transmission of the data is aimed at payment processing and fraud prevention. The controller will transfer personal data to PayPal, in particular, if a legitimate interest in the transmission is given. The personal data exchanged between PayPal and the controller for the processing of the data will be transmitted by PayPal to economic credit agencies. This transmission is intended for identity and creditworthiness checks. 

PayPal will, if necessary, pass on personal data to affiliates and service providers or subcontractors to the extent that this is necessary to fulfill contractual obligations or for data to be processed in the order. 

The data subject has the possibility to revoke consent for the handling of personal data at any time from PayPal. A revocation shall not have any effect on personal data which must be processed, used or transmitted in accordance with (contractual) payment processing. 

The applicable data protection provisions of PayPal may be retrieved under https://www.paypal.com/us/webapps/mpp/ua/privacy-full.

19. Klarna privacy policy

“In order to offer you Klarna’s payment methods, we might in the checkout pass your personal data in the form of contact and order details to Klarna, in order for Klarna to assess whether you qualify for their payment methods and to tailor those payment methods for you.

Your personal data transferred is processed in line with Klarna’s own privacy notice.”

20. Online Shop

Our online shop uses the platform shopware ("shopware AG, Ebbinghoff 10, 48624 Schöppingen"). If you place an order in our shop, you agree to the storage and processing of your personal data by shopware. For this purpose, your personal data will be transmitted to the data center also outside the European Economic Area (EEA) and forwarded to the Shopware data center and processed. This storage and processing of data is done for the purposes of supporting and processing your orders, authentication, handling payment transactions and improving Shopware's services. For more information about Shopware's terms of use and privacy policy, please visit https://www.shopware.com/de/datenschutz/.

Our online shop uses the platform WeClapp ("weclapp SE, Neue Mainzer Straße 66 - 68, 60311 Frankfurt am Main"). If you place an order in our shop, you agree with the storage and processing of your personal data by WeClapp. Therefore your personal data will be forwarded to the WeClapp data center and processed. This storage and processing of the data takes place for the purpose of the support and the processing of your orders, your authentication, the handling of the payment transactions and the improvement of the services of WeClapp. For further information about terms of use and data protection of WeClapp please visit https://www.weclapp.com/de/datenschutz/.

21. legal basis of the processing

Art. 6 I lit. a DS-GVO serves our company as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the supply of goods or the provision of another service or consideration, the processing is based on Art. 6 I lit. b DS-GVO. The same applies to such processing operations which are necessary for the implementation of pre-contractual measures, for example in cases of enquiries about our products or services. If our company is subject to a legal obligation which makes it necessary to process personal data, for example to fulfil tax obligations, the processing is based on Art. 6 I lit. c DS-GVO. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company was injured and his or her name, age, health insurance details or other vital information had to be passed on to a doctor, hospital or other third party. The processing would then be based on Art. 6 I lit. d DS-GVO. Finally, processing operations could be based on Art. 6 I lit. f DS-GVO. Processing operations which are not covered by any of the above legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or of a third party, provided that the interests, fundamental rights and freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47 sentence 2 DS-GVO).

22. Legitimate interests in processing pursued by the controller or a third party

If the processing of personal data is based on Article 6 I lit. f DS-GVO, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and our shareholders.

23. Duration for which personal data are stored

The criterion for the duration of storage of personal data is the respective legal retention period. After expiry of this period, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment of the contract or the initiation of a contract.

24. Legal or contractual provisions on the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of not providing the data

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may be required for reason.

Source : Générateur de confidentialité par AdSimple®