I. General Information and Legislative Basis
1. Responsible Party
Geschäftsführung Hanz Geeratz & Michael Wolf
Registereintrag: Amtsgericht Hamburg - HRB 149417
2. Legislative Basis and Processing
The processing of personal data requires a legal basis, which we would like to present to you here. For the processing of personal data, for which we have obtained the data subject's consent, the legal basis is Article 6(1)(a) of the General EU Data Protection Regulation (GDPR).
For the processing of personal data, which is necessary for the performance of a contract to which the data subject is a party, GDPR Article 6(1)(b) serves as the legal basis. This also includes processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is required to fulfill a legal obligation to which our company is subject, GDPR Article 6 paragraph 1 lit. c serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company, or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, GDPR Article 6(1)(f) serves as the legal basis for processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimisation and maintenance of the security of our online offer.
II. Log Files, Hosting
The server statistics automatically store data that the browser transmits to us within the framework of our legitimate interest concerning analysis and for security reasons (so-called "log files").
The following data is transmitted to us via log files:
● Language and version of the browser software
● Operating system and user interface
● Referrer URL (the website you visited prior)
● Host name of the device (IP address)
● Date and time of the server request (time zone difference to GMT)
● Transmitted data volume
The data will solely be used for statistical analysis to help us improve our security, our website and our offers. As a general rule we cannot connect individual people with the transmitted data. We do not undertake a consolidation of this data with other data sources.
The data will be deleted within 7 days after a statistical evaluation. Data which further storage is required for evidentiary purposes are excluded from deletion until the respective incident has been clarified.
We use hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services as well as technical maintenance services in order to maintain the operation of this online offer.
We and our hosting provider process inventory data, contact data, content data, contract data, usage data, meta- and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.
III. Contractual Processing
The personal data provided by you for contractual purposes, such as name, address or e-mail address, will only be used internally to answer your inquiries, process your orders or provide you access to certain contractual information.
IV. Contacting wingu
When you contact us by e-mail or via the contact form, your details will be stored by us (and Zendesk in case the contact form is used) to answer your questions. A transfer to third parties (potentially apart from Zendesk) does not take place unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased and there are no other conflicting legal exceptions. You can inform yourself at any time about the data stored about your person.
It is possible to use our website without accepting cookies. You can configure your browser settings in such a manner that will prevent the setting of third party, or all cookies. You can also delete saved cookies. In case you do not accept cookies, please be aware that our website and portal might not function error-free.
For more information about third party cookies, please read the paragraphs concerning Google Analytics, Facebook, Twitter and Zendesk.
If you would like to receive the newsletter offered on our website, we need a valid e-mail address from you, which allows us to check that you are the owner of the given e-mail address or that the owner agrees to receive the newsletter.
After providing your e-mail address, we will send you a confirmation e-mail to the address provided, asking you to confirm that you would like the newsletter to be sent. If you do not confirm this within 24 hours, your data relating to the newsletter dispatch will be deleted automatically. If you confirm your wish to receive the newsletter, we will store your e-mail address until you cancel the newsletter.
We only send newsletters with your consent or a legal permission. You can revoke your consent to the storage of the data, the e-mail address as well as their use for sending the newsletter at any time. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and cancelled their subscription, their personal data will be deleted.
Our website offers a registration option. The personal data entered during registration will be communicated to the controller. The data are stored exclusively for the purpose of internal use. During registration, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass on.
Registration of the data is required for the provision of content or services. Registered persons have the possibility to delete or modify the stored data at any time. The person concerned receives information about the personal data stored about him or her at any time.
VIII. Passing on Information to Third Parties
We pass on data to third parties if this is necessary for the fulfillment of the contract and/or we are legally obliged and / or entitled to do so in individual cases.
If you choose to pay with the online payment service PayPal as part of your order process, your contact details will be transmitted to PayPal when the order is placed. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and trustee and offers buyer protection services.
The personal data transmitted to PayPal are data which are necessary for order processing as well as data which are in connection with the order, such as number of articles, article number, and invoice amount. This transfer is necessary to process your order using the payment method you have chosen, in particular to confirm your identity, to administer your payment and the customer relationship.
Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal is transmitted by PayPal to credit agencies. This transfer serves to verify your identity and creditworthiness with regard to the order you have placed. Please read PayPal's data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full to find out which credit agencies are involved and which data PayPal generally collects, processes, stores and passes on.
2. Pixel Tags
In some cases, we make use of external service providers within the scope of our legitimate interests with regard to the analysis, optimisation and economic operation of the online offering. This always presupposes that the third party providers of this content perceive the IP address of the users, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required for the display of this content. Third-party providers can also use so-called pixel tags (invisible graphics, also "web beacons") for statistical or marketing purposes. Pixel tags can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain technical information similar to logfiles. Below we list our service providers. If your data is to be used for other purposes, we will inform you in advance and only use the data if you have expressly given your consent in advance.
We use services of Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, ("Google") within the scope of our legitimate interests in the analysis, optimization and economic operation of our online offer. Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law. (https://www.privacyshield.gov/participant?id=a2zt00000000001L5AAI&status=Active).
3.1 Google Analytics
Our website uses Google Analytics with the addition “_anonymizeIp()”. This means that IP addresses stemming from EU and EEA are shortened prior to sending them to the Google server. This is done to prevent personal tracking. Only in exceptional cases it may happen that the complete IP address is transmitted to the Google server in the USA. In this case the IP address will be shortened in the USA.
For more information concerning the purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights and setting options for the protection of your privacy please read the data protection information of Google at http://www.google.de/intl/de/policies/privacy/?hl=desand especially for Google Analytics at https://www.google.com/policies/privacy/partners/?hl=deand at https://support.google.com/analytics/answer/6004245?hl=en as well as for Universal Analytics at https://support.google.com/analytics/answer/2838718?hl=en
The collection and storage of data by Google may be revoked for the respective terminal device at any time with future effect in connection with the use of this link: http://tools.google.com/dlpage/gaoptout?hl=en
Attention: If you delete your cookies, the deactivation cookie will also be deleted and must be stored by you again.
3.2 Google Fonts
3.3 Google Tag Manager
We use the Google Tag Manager. This enables us to manage website tags via an interface and thus integrate Google marketing services into our online offering, for example. The Tag Manager itself does not process any personal user data. For the respective Google services, reference is made to the respective notes and the usage guidelines at https://www.google.com/intl/de/tagmanager/use-policy.html.
Our pages include functions of the Twitter service. These features are provided by Twitter Inc, 795 Folsom St., Suite 600, San Francisco, CA 94107, USA ("Twitter"). Twitter observes the principles of the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active) and the Swiss-US Privacy Shield regarding the collection, use, transmission and storage of personal data from the European Union and Switzerland according to its own statements.
Twitter only stores tailored content together with browser cookies or device IDs and separates them from other data, such as information about pages visited. After a maximum of 10 days, Twitter will begin to delete, unidentify or collect this data.
By using Twitter and the "Re-Tweet" function, the websites you visit are linked to your Twitter account and made known to other users. Data is also transmitted to Twitter. If you do not want this, please log out of your Twitter account (before pressing the opt-in button).
We use services of the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook") within the scope of our legitimate interests in the analysis, optimisation and economic operation of our online offer. Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law.
We use the Intercom ticketing system, a customer service platform of Intercom Inc, 55 2nd Street, 4th Floor, San Francisco, California 94105, which is certified under the Privacy Shield Agreement, providing a guarantee to comply with European data protection laws.
IX. Rights of the Data Subject
You have a right to information concerning your personal data stored by us. According to the legal regulations you also have a right to correction of incorrect data, blocking, data transferability and deletion of your personal data. Send us an e-mail with the subject "Privacy".
You also have a right of appeal to a data protection supervisory authority if you believe that the processing of your personal data is in violation of the law.
If you have given your consent, you have the right to revoke your consent at any time. This does not affect the legality of the processing carried out on the basis of the consent until revocation. You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection may be lodged in particular against processing for direct marketing purposes.
X. Data Retention and Deletion
We store personal data for the duration of the respective legal retention period or as long as the purpose of the collection exists. After expiry of the retention period, the data is routinely deleted, unless there is a need for the initiation of a contract or for performance of the contract. If the user's data are not deleted because they are necessary for other, and legally permissible, purposes, their processing is limited as far as possible. Accordingly, the data will be blocked as far as possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax reasons.
XI. Security Information
We make great efforts to process your personal data by taking all technical and organizational possibilities in such a way that the regulations of the data protection laws are observed and in order to protect these data. Our website or the communication with us via our website is encrypted via HTTPS.