-
Notifications
You must be signed in to change notification settings - Fork 1
/
privacy.html
401 lines (296 loc) · 26.9 KB
/
privacy.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
---
title: Privacy | layerJS
frame: privacy
---
<section>
<div class="container">
</div>
</section>
<section id="privacy">
<div class="container">
<h2>PRIVACY POLICY</h2>
<p>The 9 friendly white rabbits UG (hereinafter also 9fwr) takes the protection of your personal data very seriously and
strictly adheres to the legal regulations. We commit ourselves to protect your privacy and to treat your data confidentially.
The following declaration gives you an overview of how we guarantee this protection and what kind of data is collected
for what purpose.</p>
<h3>SECURITY AND PROTECTION OF YOUR PERSONAL DATA</h3>
<p>We consider it our primary task to protect the confidentiality of the personal data you provide and to protect it from
unauthorized access. We therefore apply the utmost care and state-of-the-art security standards to ensure maximum protection
of your personal data.</p>
<p>As a company under private law, we are subject to the provisions of the General Data Protection Regulation (GDPR) and
the provisions of the German Federal Data Protection Act (BDSG). We have taken technical and organisational measures to ensure
that the data protection regulations are observed both by us and by our external service providers.</p>
<h3>NOTE TO THE RESPONSIBLE OFFICE</h3>
<p>The responsible body for data processing on this website is:</p>
<p>9 friendly white rabbits UG</p>
<p>Wöhlertstr. 4</p>
<p>10115 Berlin</p>
<p>Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of
processing personal data (e.g. names, e-mail addresses, etc.).</p>
<p> </p>
<h2>I. DEFINITIONS</h2>
<p>The legislator requires that personal data be processed in a lawful manner, in good faith and in a manner that is comprehensible
to the person concerned ("lawfulness, processing in good faith, transparency"). In order to ensure this, we inform
you about the individual legal definitions which are also used in this data protection declaration:</p>
<h4>1. personal data</h4>
<p>"Personal data" means any information relating to an identified or identifiable natural person (hereinafter referred
to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular
by assignment to an identifier such as a name, an identification number, location data, an online identifier or to
one or more special characteristics which express the physical, physiological, genetic, psychological, economic, cultural
or social identity of that natural person.</p>
<h4>2. processing</h4>
<p>"processing" means any operation carried out, with or without the aid of automated procedures, or any such series of
operations relating to personal data, such as the collection, collection, organisation, arrangement, storage, adaptation
or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision,
comparison or linking, restriction, erasure or destruction.</p>
<h4>3. restriction of processing</h4>
<p>"Restriction on processing" means the marking of stored personal data with the aim of restricting their future processing.</p>
<h4>4. profiling</h4>
<p>"Profiling" means any automated processing of personal data consisting in the use of such personal data to evaluate certain
personal aspects relating to a natural person, in particular to analyse or predict aspects relating to the work performance,
economic situation, health, personal preferences, interests, reliability, behaviour, location or relocation of that
natural person.</p>
<h4>5. pseudonymization</h4>
<p>"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be attributed
to a specific data subject without the use of additional information, provided that this additional information is
kept separately and is subject to technical and organisational measures which ensure that the personal data cannot
be attributed to an identified or identifiable natural person.</p>
<h4>6. file system</h4>
<p>"file system" means any structured collection of personal data accessible according to specific criteria, whether centralised,
decentralised, functional or geographical.</p>
<h4>7. person in charge</h4>
<p>"controller" means a natural or legal person, authority, body, agency or other body which alone or jointly with others
decides on the purposes and means of processing personal data; where the purposes and means of such processing are
specified by Union law or the law of the Member States, the controller or certain criteria for his appointment may
be laid down in accordance with Union law or the law of the Member States.</p>
<h4>8. contractors</h4>
<p>"processor" means a natural or legal person, authority, institution or other body processing personal data on behalf
of the data controller.</p>
<h4>9. recipient</h4>
<p>"Recipient" means a natural or legal person, authority, institution or other body to which personal data is disclosed,
whether or not it is a third party. However, authorities which may receive personal data under Union law or the law
of the Member States under a particular investigation mandate shall not be considered recipients; the processing of
such data by the said authorities shall be carried out in accordance with the applicable data protection rules in accordance
with the purposes of the processing.</p>
<h4>10. third parties</h4>
<p>"third party" means a natural or legal person, authority, institution or other body other than the data subject, the
data processor, the data processor and the persons authorised to process the personal data under the direct responsibility
of the data processor or the data processor.</p>
<h4>11. consent</h4>
<p>Data subject's "consent" means any voluntary declaration of intent in the specific case, in an informed and unequivocal
manner, in the form of a declaration or other clear affirmative act with which the data subject indicates that he or
she agrees to the processing of personal data concerning him or her.</p>
<p> </p>
<h2>II. LEGALITY OF PROCESSING</h2>
<p>The processing of personal data is only legal if there is a legal basis for the processing. Pursuant to Article 6(1),
the legal basis for processing may be lit. a - f GDPR in particular:</p>
<ul>
<li>The data subject has given his/her consent to the processing of his/her personal data for one or more specific purposes;</li>
<li>processing is necessary for the performance of a contract to which the data subject is a party or for the implementation
of pre-contractual measures taken at the request of the data subject;</li>
<li>the processing is necessary to fulfil a legal obligation to which the controller is subject;</li>
<li>processing is necessary to protect the vital interests of the data subject or another natural person;</li>
<li>processing is necessary for the performance of a task in the public interest or in the exercise of official authority
conferred on the controller;</li>
<li>processing is necessary to safeguard the legitimate interests of the data controller or a third party, unless the interests
or fundamental rights and freedoms of the data subject, which require the protection of personal data, prevail, in
particular where the data subject is a child.</li></ul>
<h3>1 INFORMATION ON THE COLLECTION OF PERSONAL DATA</h3>
<p>(1) In the following we inform about the collection of personal data when using our website. Personal data are all data
that are personally identifiable to you, e.g. name, address, e-mail addresses, user behavior.</p>
<p>(2) Statutory data protection officer</p>
<p>We do not have to appoint a data protection officer for our company. Responsible for data protection is:</p>
<p>9 friendly white rabbits UG</p>
<p><a href="mailto:[email protected]">[email protected]</a> </p>
<p>(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, if applicable your
name and your telephone number) will be stored by us in order to answer your questions. We delete the data arising
in this context after the storage is no longer necessary, or limit the processing if statutory retention obligations
exist.</p>
<p>(4) If we make use of contracted service providers for individual functions of our offer or would like to use your data
for advertising purposes, we will inform you in detail about the respective processes below. We also specify the defined
criteria for the storage period.</p>
<h3>2 YOUR RIGHTS</h3>
<p>(1) You have the following rights towards us with regard to personal data concerning you:</p>
<ul>
<li>Right to information,</li>
<li>Right to correction or deletion,</li>
<li>right to limitation of processing,</li>
<li>right of opposition to the processing,</li>
<li>Right to data transferability.</li>
</ul>
<p>(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal
data.</p>
<h3>3 COLLECTION OF PERSONAL DATA WHEN VISITING OUR WEBSITE</h3>
<h4>(1) Data recieved from by the Webservers</h4>
<p>When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information,
we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect
the following data, which are technically necessary for us to display our website to you and to guarantee stability
and security (legal basis is Art. 6 Para. 1 S. 1 lit. f DS-GVO):</p>
<ul>
<li>IP address</li>
<li>date and time of the request</li>
<li>Time zone difference to Greenwich Mean Time (GMT)</li>
<li>Content of the request (specific page)</li>
<li>Access status/HTTP status code</li>
<li>the amount of data transferred in each case</li>
<li>Website from which the request comes</li>
<li>Browser</li>
<li>Operating system and its interface</li>
<li>Language and version of the browser software.</li>
</ul>
<h4>(2) Newsletter</h4>
<p>
a) If you register for our free newsletter, your data, i.e. your e-mail address and - optionally - your name, will be sent to us. As part of the further registration process, we will obtain your consent to sending the newsletter and describe the content in detail. The data is used exclusively for sending the newsletter - it will not be passed on to third parties.
</p><p>
b) The legal basis for this is Art. 6 para. 1 lit. a) GDPR.
</p><p>
c) You may revoke your consent to receive the newsletter at any time with effect for the future as defined in Art. 7 para. 3 GDPR. Just click the unsubscribe link contained in each newsletter.
</p><p>
d) We use MailChimp, a service of The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA, hereinafter referred to as "The Rocket Science Group",
which is certified according to the EU-US privacy shield ("EU-US Privacy Shield")
The Rocket Science Group offers further data protection information:
<a href="http://mailchimp.com/legal/privacy/">http://mailchimp.com/legal/privacy/</a>
</p>
<h4>(3) Contact form / contact by e-mail</h4>
<p>
a) If you contact us via contact form or e-mail, the data you provide will be used to process your request. Providing the data is necessary to process your request.
</p><p>
b) The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
</p><p>
c) Your data will be deleted if your request has been completely answered and no further legal obligation to keep your data safe exists.
</p>
<h4>(4) Use of cookies:</h4>
<p>In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small
text files that are stored on your hard disk in the browser you use and through which certain information flows to
the place that sets the cookie (here by us). Cookies cannot run programs or transmit viruses to your computer. They
serve to make the Internet offer more user-friendly and effective overall.</p>
<p>a) This website uses the following types of cookies, the scope and functioning of which are explained below:</p>
<p>Transient cookies (see b)</p>
<p>Persistent cookies (see c)</p>
<p>b) Transient cookies are automatically deleted when you close your browser. This includes in particular the session cookies.
These store a so-called session ID, with which different requests of your browser can be assigned to the common session.
This will allow your computer to be recognized when you return to our website. Session cookies are deleted when you
log out or close your browser.</p>
<p>c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You
can delete cookies at any time in the security settings of your browser.</p>
<p>d) You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third
party cookies or all cookies. Please note that you may not be able to use all functions of this website.</p>
<p>e) We use cookies to identify you for follow-up visits if you have an account with us. Otherwise you will have to log
in again for each visit.</p>
<p>f) We use cookies to determine whether you come to us via a specific partner dealer on the website and then to make it
easier for you to return to your dealer.</p>
<h4>(5) Use of Google Analytics:</h4>
<p>a) This website uses Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses "cookies",
which are text files placed on your computer, to help the website analyze how users use the site. The information generated
by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.
However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States
of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional
cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator
of this website, Google will use this information to evaluate your use of the website, to compile reports on website
activity and to provide the website operator with further services associated with website and Internet use.</p>
<p>b) The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google
data.</p>
<p>c) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that
if you do this you may not be able to use the full functionality of this website. You can also prevent Google from
collecting the data generated by the cookie and relating to your use of the website (including your IP address) and
from processing this data by Google by downloading and installing the browser plug-in available under the following
link: <a href="https://tools.google.com/dlpage/gaoptout">tools.google.com/dlpage/gaoptout</a>.</p>
<p>d) This website uses Google Analytics with the extension "_anonymizeIp". As a result, IP addresses are further processed
in abbreviated form, so that a personal relationship can be ruled out. As far as the data collected about you is personal,
it will be excluded immediately and the personal data will be deleted immediately.</p>
<p>e) We use Google Analytics to analyse and regularly improve the use of our website. We can improve our offer and make
it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA,
Google has submitted to the EU-US Privacy Shield, <a href="https://www.privacyshield.gov/EU-US-Framework">www.privacyshield.gov/EU-US-Framework</a>. The legal basis for the use
of Google Analytics is Art. 6 Par. 1 S. 1 lit. f GDPR.</p>
<p>f) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353
(1) 436 1001. user conditions: <a href="https://www.google.com/analytics/terms/de.html">www.google.com/analytics/terms/de.html</a>, privacy policy: <a href="https://www.google.com/intl/de/analytics/learn/privacy.html">www.google.com/intl/de/analytics/learn/privacy.html</a>,
and privacy policy: <a href="https://www.google.de/intl/de/policies/privacy">www.google.de/intl/de/policies/privacy</a>.</p>
<p>g) You can also disable the use of Google Analytics for this browser on this website by clicking this
<a href="javascript:adv_gdpr_optout('analytics')">link</a>. An opt-out cookie is stored in your browser. If you delete your cookies in this browser, you must click the
link again.</p>
<h4> (6) Using Google Optimize </h4>
<p> a)This website uses Google Optimize, an analysis service of Google Inc. Optimize allows us to try out new variants
of the website on some of the users and thus contribute to the improvement of our offer.</p>
<p>b) Google Optimize uses cookies to recognize users on different visits and thus display consistent versions. The data is transferred to Google Analytics (see section Google Analytics) and processed there for analysis. The reports themselves do not contain any personal data.</p>
<p>c) The data is transmitted to Google servers in the USA. Basis is the Privacy Shield certification of Google https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI </p>
<p>d) You may opt out of using Google Optimize on this device and for this website by clicking <a href="javascript:adv_gdpr_optout('analytics')" data-gdpr-optout="analytics">this link</a>. You may need to repeat this on other devices. You can also generally prevent cookies by making the appropriate settings in your browser, but then some functions of the website (and other websites) may no longer function correctly.</p>
<p>e) We use Google Optimize to analyse and regularly improve the use of our website. We can improve our offer and make
it more interesting for you as a user. The legal basis for the use
of Google Analytics is Art. 6 Par. 1 S. 1 lit. f GDPR.</p>
<p>f) Information from third parties: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: www.google.com/analytics/terms/de.html, Privacy policy: www.google.com/intl/de/analytics/learn/privacy.html, and Privacy policy: www.google.de/intl/de/policies/privacy.</p>
<h4>(7) Using the Google Tag Manager</h4>
<p>a) We use the Google TAG Manager to control advertising measures. Tag Manager collects personal data on your end device
and passes it directly to other integrated marketing providers on your end device who process it in accordance with
this privacy policy. The TAG Manager itself stores or does not transfer this data. Cookies may be set to ensure this
function. The TAG Manager is also responsible for your opt-out to individual marketing providers</p>
<p>b) Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353
(1) 436 1001. privacy policy: <a href="https://www.google.de/intl/de/policies/privacy">www.google.de/intl/de/policies/privacy</a>.</p>
<p>c) The legal basis for the use of the Google TAG Manager is Art. 6 para. 1 sentence 1 letter b GDPR. The tag manager
is necessary for the function of the page.</p>
<h4>(8) Bugsnag</h4>
<p>
a) The website uses the tool Bugsnag of Bugsnag Inc, 939 Harrison St., San Francisco, CA 94107. In case of errors on the site, Bugsnag transfers information about the error, the IP address, Browser type, Operating System, Screen Resolution to their servers. This information can be used exclusively by our developers to analyse the error.
</p><p>
b) The legal basis for this is Art. 6 para. 1 lit. f) GDPR.
</p><p>
</p><p>
c) Bugsnag complies with the requirements of the EU-U.S. Privacy Shield Framework (“Privacy Shield”), as set forth by the U.S. Department of Commerce and the Federal Trade Commission (“FTC”), regarding the collection, use, and retention of Personal Information transferred from the European Economic Area to the United States. Bugsnag has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.
Bugsnag offers further data protection information:
<a href="https://docs.bugsnag.com/legal/privacy-policy/">https://docs.bugsnag.com/legal/privacy-policy</a>
</p>
<h4>(9) Amplitude</h4>
<p>
a) The website uses the tool Amplitude of Amplitude Inc. 400 R Street, Sacramento, CA 95814 to statistically analyse user behaviour on our website.
Amplitude uses "cookies", which are text files placed on your computer, which contain pseudonymous ids to detect recurring visits of our users. The information generated
by the cookie about your use of this website is usually transferred to a server in the USA and stored there.
</p><p>
b) The legal basis for this is Art. 6 para. 1 lit. f) GDPR.
</p><p>
c) The data collected and processed includes information on the end device used and the activity of the user on the website. In addition, the IP address and the requesting provider are stored.
</p><p>
d) Amplitude complies with the requirements of the EU-U.S. Privacy Shield Framework (“Privacy Shield”), as set forth by the U.S. Department of Commerce and the Federal Trade Commission (“FTC”), regarding the collection, use, and retention of Personal Information transferred from the European Economic Area to the United States. Bugsnag has certified to the Department of Commerce that it adheres to the Privacy Shield Principles.
<a href="https://www.privacyshield.gov/participant?id=a2zt000000001XZAAY&status=Active">https://www.privacyshield.gov/participant?id=a2zt000000001XZAAY&status=Active</a>
</p><p>
<p>e) You may opt out of using Amplitude on this device and for this website by clicking <a href="javascript:adv_gdpr_optout('analytics')" data-gdpr-optout="analytics">this link</a>. You may need to repeat this on other devices. You can also generally prevent cookies by making the appropriate settings in your browser, but then some functions of the website (and other websites) may no longer function correctly.</p>
</p>
<!-- <h4>(7) Integration of Google Maps</h4>
<p>a) On this website we use the offer of Google Maps. This allows us to display interactive maps directly on the website
and enables you to conveniently use the map function.</p>
<p>b) By visiting the website, Google receives the information that you have called up the corresponding subpage of our
website. In addition, the data specified in § 3 of this declaration will be transmitted. This is regardless of whether
Google provides a user account that you are logged in with or whether no user account exists. If you are logged in
to Google, your information will be directly associated with your account. If you do not wish to be associated with
your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and
uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation
takes place in particular (even for unlogged-in users) to provide demand-oriented advertising and to inform other users
of the social network about your activities on our website. You have the right to object to the creation of these user
profiles, whereby you must contact Google to exercise this right.</p>
<p>c) Further information on the purpose and scope of data collection and its processing by the plug-in provider can be
found in the data protection declarations of the provider. You can also find out more about your rights and privacy
settings there: <a href="https://www.google.de/intl/de/policies/privacy">www.google.de/intl/de/policies/privacy</a>. Google also processes your personal data in the USA and has
submitted to the EU-US Privacy Shield, <a href="https://www.privacyshield.gov/EU-US-Framework">www.privacyshield.gov/EU-US-Framework</a>.</p> -->
<h3>4 CONTRACT PROCESSORS</h3>
<p>Our service providers (contract processors) include printers, lettershops, call centres, logistics companies, data centres
and advertising and analysis service providers. Our service providers are prohibited from processing your data for
purposes other than those agreed. Contracts for processing on behalf of these service providers (Art. 28 GDPR) have
been concluded.</p>
<h3>5 CONTRADICTION OR REVOCATION AGAINST THE PROCESSING OF YOUR DATA</h3>
<p>(1) If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation
influences the permissibility of processing your personal data after you have given it to us.</p>
<p>(2) If we base the processing of your personal data on the weighing of interests, you may object to the processing. This
is the case if processing is not necessary in particular to fulfil a contract with you, which is described by us in
the following description of the functions. When exercising such objection, we ask you to explain the reasons why we
should not process your personal data as we have done. In the event of your justified objection, we will examine the
situation and either stop or adjust data processing or point out to you our compelling reasons worthy of protection,
on the basis of which we will continue processing.</p>
<p>(3) Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at
any time. You can inform us about your advertising contradiction under the following contact data:</p>
<p>9 friendly white rabbits UG</p>
<a href="mailto:[email protected]"><p>[email protected]</p></a>
<p>This data protection declaration is based on the current legal basis and has been prepared to the best of our knowledge.
From time to time it is necessary to adapt the contents of this data protection notice for future data collected and,
if necessary, legal changes. We therefore reserve the right to change these notes at any time. We will also publish
the amended version of the data protection information here. If you visit us again, you should therefore read the data
protection information again.</p>
</div>
</section>