1. General Information and Principles of Data Processing

We are pleased that you are visiting our website. Protecting your privacy and your personal data—known as personal information—when you use our website is a matter of great importance to us.

According to Article 4(1) of the GDPR, personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your phone number, your email address, and your IP address. Data for which no connection to your person can be established—such as through anonymization—is not considered personal data.

Processing (e.g., collection, storage, retrieval, consultation, use, disclosure, erasure, or destruction) pursuant to Article 4(2) of the GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations to be observed.

Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you. We also explain to you the nature and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective retention period.

This privacy policy applies only to this website. It does not apply to other websites to which we merely link via a hyperlink. We cannot assume any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence over whether these companies comply with data protection regulations. Please refer directly to these websites for information on how these companies handle your personal data.

2. Data Controller

The person responsible for the processing of personal data on this website is:

3. Provision and Use of the Website / Server Log Files

a) Nature and scope of data processing

When you use this website without otherwise transmitting data to us (e.g., through registration or use of the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:

• IP address
• Date and time of the request
• Name and URL of the file accessed
• Website from which access is made (referrer URL)
• Access status/HTTP status code
• Browser type
• Language and version of the browser software
• Operating system

b) Purpose and Legal Basis

This process is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6(1)f) of the GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard the legitimate interest of our company.

c) Retention period

As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no right to object to this aspect. Further storage may occur in individual cases if required by law.

Hosted by ALL-INKL.COM

The website is hosted on servers operated by ALL-INKL.COM - Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf.

When you visit our website, the browser on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. This information includes:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the file accessed,
• the website from which the access originated (referrer URL),
• the browser used and, if applicable, your computer’s operating system, as well as the name of your Internet service provider.

ALL-INKL.COM processes the aforementioned data for the following purposes:

• To ensure a smooth connection to the website,
• to ensure a convenient user experience on our website and in our online store,
• Evaluating system security and stability, as well as
• for other administrative purposes.

This data is processed on the basis of Art. 6(1)(1)(f) GDPR. The processing serves to safeguard a legitimate interest of our company, namely ensuring the functionality and security of our website.

A data processing agreement in accordance with Art. 28 of the GDPR has been concluded with ALL-INKL.COM. ALL-INKL.COM processes personal data exclusively in accordance with our documented instructions and in compliance with statutory data protection regulations.

For more information on the privacy policy, visit: https://all-inkl.com/datenschutzinformationen/

4. Use of Cookies

a) Type, scope, and purpose of data processing

We use cookies. Cookies are small files that we send to the browser on your device during your visit to our website and that are stored there.

Some functions of our website cannot be provided without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. For example, cookies allow us to make our website more user-friendly and effective for you by, for instance, tracking your use of our website and determining your preferred settings (such as country and language settings). If third parties process information via cookies, they collect this information directly through your browser. However, cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses. Various types of cookies are used on our website; their types and functions are explained below.

Temporary Cookies/Session Cookies

Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a single session and enables us to recognize your device during subsequent visits to the website.

Persistent Cookies

Our website uses so-called persistent cookies. Persistent cookies are cookies that are stored in your browser for an extended period and can transmit information. The storage duration varies depending on the cookie. You can delete persistent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymized user behavior on our website.

We also use advertising cookies. These cookies allow us to track user behavior for advertising and targeted marketing purposes.

Social media cookies allow you to connect to your social networks and share content from our website within your networks.

Configuring browser settings

Most web browsers are set by default to automatically accept cookies. However, you can configure your browser to accept only certain cookies or none at all. Please note, however, that you may then no longer be able to use all features of our website.

You can also use your browser settings to delete cookies already stored in your browser. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since different browsers may function differently, we ask that you consult your browser’s help menu for the relevant configuration options.

Disabling the use of cookies may require the storage of a permanent cookie on your computer. If you subsequently delete this cookie, you will need to disable it again.

b) Legal Basis

Based on the purposes described, the legal basis for the processing of personal data using cookies is Article 6(1)f) of the GDPR. If you have given us your consent to the use of cookies based on a notice provided by us on the website (“cookie banner”), the legal basis is additionally Article 6(1)a) of the GDPR.

c) Retention Period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may occur in individual cases if required by law.

5. Data collection for the implementation of pre-contractual measures and for contract fulfillment

a) Nature and scope of data processing

We collect personal data about you during the pre-contractual phase and upon conclusion of the contract. This includes, for example, your first and last name, address, email address, phone number, or bank account information.

b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of contract performance or to fulfill pre-contractual obligations. The legal basis for this is Article 6(1)b) of the GDPR. If you have also given your consent, the additional legal basis is Article 6(1)a) of the GDPR.

c) Retention period

The data will be deleted as soon as it is no longer necessary for the purpose of its processing.

In addition, statutory retention obligations may apply, such as commercial or tax law retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data upon the expiration of these retention obligations.

6. Registration options

a) Nature and scope of data processing

You can register on our website. When you register, we collect and store the data you enter into the input form (e.g., last name, first name, email address). This data is not shared with third parties.

b) Purpose and Legal Basis of Data Processing

Your registration is necessary for the use of certain content and services on our website, for the fulfillment of a contract, or for the implementation of pre-contractual measures. After registration, you are free to modify the personal data provided during registration at any time or to have it completely deleted from the data controller’s database.

The legal basis for processing, in the case of consent, is Art. 6(1)a) GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6(1)b) GDPR is an additional legal basis.

c) Retention Period

We will store the data collected during registration for as long as you are registered on our website, after which it will be deleted. Statutory retention periods remain unaffected.

7. Order Form

An order form is available on our website that can be used for electronic pre-orders.

a) Nature and scope of data processing

Our data collection is limited to the following data:

• First and last name
• Phone number
• Email address
• Account details
• Product name

b) Purpose and legal basis

The purpose of data processing is to enable us to process your order properly. The legal basis for this is Article 6(1)b) of the GDPR. The processing of the data serves to fulfill a contract or is necessary for the implementation of a pre-contractual measure taken at the request of the data subject.

c) Retention period

The data will be deleted as soon as it is no longer needed to achieve the purpose of the processing. In addition, statutory retention obligations may apply, such as commercial or tax law retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data upon the expiration of these retention obligations.

8. Contact Form

a) Nature and Scope of Data Processing

On our website, we offer you the opportunity to contact us via a provided contact form. As part of the process of submitting your inquiry via the contact form, you will be referred to this privacy policy to obtain your consent.

If you use the contact form, the following personal data will be processed:

• Title
• First name
• Last name
• Title
• Company
• Industry
• Position
• Street
• Street number
• Zip code
• City
• Country
• Email address
• Phone number
• Subject
• Message content

b) Purpose and legal basis

The purpose of providing your email address is to send you a response to your inquiry via email. When using the contact form, your personal data will not be disclosed to third parties.

The legal basis for processing is consent pursuant to Art. 6(1)a) of the GDPR, based on the declaration of consent you voluntarily provide, which may be revoked at any time with future effect.

c) Retention period

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). This does not affect mandatory legal provisions—in particular retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO).

9. Contact Options via Email

Our website offers you the option of contacting us via email.

a) Nature and scope of data processing

You can contact us by email. In doing so, the data we collect is limited to the email address of the account you use to contact us, as well as any personal data you voluntarily provide when contacting us.

b) Purpose and Legal Basis

The purpose of data processing is to enable us to respond appropriately to your inquiry. The legal basis for this is Article 6(1)f) of the GDPR. There is a legitimate interest in processing the aforementioned personal data in order to handle your inquiry appropriately.

c) Retention period

The duration of storage of the aforementioned data depends on the context of your contact. Your personal data will be deleted on a regular basis once the purpose of communication is no longer applies and storage is no longer necessary. This may result, for example, from the processing of your inquiry.

11. Comment Function

a) Nature and scope of data processing

You can comment on posts on our website. When you comment on a post, we collect and store the data you enter into the input form. In addition to the comments you leave, information regarding the time the comment was submitted and, if applicable, the username (pseudonym) you selected will also be stored and published. Furthermore, the IP address assigned by the data subject’s Internet Service Provider (ISP) is stored. No data is disclosed to third parties.

b) Purpose and Legal Basis

The data you provide (e.g., your IP address) is collected for security reasons and in the event that the data subject infringes the rights of third parties or posts illegal content through a submitted comment. This collected personal data is not disclosed to third parties unless such disclosure is required by law or serves to defend the legal rights of the controller.

The legal basis for processing the personal data transmitted when using the comment function is, if and to the extent that your consent is given, Article 6(1)a) of the GDPR. You may revoke this consent at any time. The lawfulness of data processing operations that have already taken place remains unaffected by the revocation. Another legal basis is Article 6(1)f) of the GDPR.

We have a legitimate interest in processing the data if the rights of third parties are infringed or if unlawful content is posted. This serves security purposes in the event that someone posts unlawful content in comments and posts (insults, prohibited political propaganda, etc.).

c) Retention Period

The comments and associated data (e.g., IP address) are stored and remain on our website until the commented-on content has been completely deleted or the comments must be deleted for legal reasons.

14. Data transfer

We will only disclose your personal data to third parties if:

a) You have given your explicit consent pursuant to Art. 6(1)(a) of the GDPR,

b) this is permitted by law and necessary under Article 6(1)b) of the GDPR to fulfill a contractual relationship with you or to take steps prior to entering into a contract,

c) there is a legal obligation to disclose the data under Article 6(1)c) of the GDPR. We are legally obligated to transfer data to government authorities, e.g., tax authorities, social security agencies, health insurance providers, regulatory agencies, and law enforcement agencies.

d) the disclosure is necessary under Article 6(1)f) of the GDPR to safeguard legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

e) pursuant to Article 28 of the GDPR, we engage external service providers, known as processors, in the processing of your data, who are obligated to handle your data with due care.

We use such service providers in the following areas:

• IT
• Logistics
• Telecommunications

When transferring data to external entities in third countries, i.e., outside the EU or the EEA, we ensure that these entities handle your personal data with the same care as within the EU or the EEA. We only transfer personal data to third countries where the European Commission has confirmed an adequate level of protection or where we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

15. Tracking and Analytics Tools

Below we inform you about the third-party services used on this website.

Koko Analytics

We use Koko Analytics on this website, a web analytics tool provided by ibericode BV, based in Nijmegen, the Netherlands. Koko Analytics aggregates data to identify general trends and patterns in website usage. The tool runs on our own web server; no data is transmitted to ibericode BV.

The data collected includes:

• Pages visited and the day of the visit
• Referrer URL (the previously visited page)
• Number of visitors and page views

The data collected is used exclusively for statistical analysis and to improve our website. Your IP address and your browser identifier are not stored; they are only briefly combined into a non-reversible hash value that changes daily and is deleted daily. It is therefore not possible to identify you personally. No personal data is stored or shared.

The use of Koko Analytics is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize both our website and its user-friendliness.

For more information about data protection at Koko Analytics, please visit the official Koko Analytics website: https://www.kokoanalytics.com/privacy-policy/

16. Data Security and Security Measures

We are committed to protecting your privacy and treating your personal data confidentially. To this, we implement comprehensive technical and organizational security measures, which are regularly reviewed and adapted to technological advancements.

This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data disclosed in unencrypted form, for example, via unencrypted email, may be read by third parties. We have no control over this. It is the responsibility of the respective users to protect the data they provide against misuse through encryption or other means.

17. Changes to the Privacy Policy

We reserve the right to update this policy at any time as necessary.

18. Your Rights

Here you will find your rights regarding your personal data. Details are set forth in Articles 7, 15–22, and 77 of the GDPR. You may contact the controller (Section 2) regarding this matter.

a) Right to Withdraw Your Consent Under Article 7(3)(1) of the GDPR

You may withdraw your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of the processing carried out prior to the withdrawal.

b) Right of access under Article 15 of the GDPR

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data as well as to further information, e.g., the purposes of processing, the categories of personal data processed, the recipients, and the planned duration of storage or the criteria for determining the duration.

c) Right to Rectification and Completion under Article 16 of the GDPR

You have the right to request the immediate rectification of inaccurate data. Considering the purposes of the processing, you have the right to request the completion of incomplete data.

d) Right to erasure (“right to be forgotten”) under Article 17 of the GDPR

You have the right to erasure provided that the processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purposes, you have withdrawn your consent under data protection law, or the data has been processed unlawfully.

e) Right to restriction of processing under Article 18 of the GDPR

You have the right to restrict processing, e.g., if you believe personal data is inaccurate.

f) Right to data portability under Article 20 of the GDPR

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

g) Right to object under Article 21 of the GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.

In the case of direct marketing, you, as the data subject, have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

h) Automated decision-making in individual cases, including profiling, pursuant to Article 22 of the GDPR

You have the right not to be subject to a decision based solely on automated processing, including profiling—except in the exceptional cases mentioned in Article 22 of the GDPR.

Decision-making based solely on automated processing, including profiling—does not take place.

i) Lodging a complaint with a data protection supervisory authority pursuant to Article 77 of the GDPR

In addition, you may lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing is not in compliance with data protection regulations.