Privacy Policy
as of: 23.11.2024
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Crak Blocker GmbH, Ludwigshafener Str. 24-26, 40229 Düsseldorf, Deutschland, Tel.: 0211-2611202, Fax: 0211-2611302, E-Mail: info@cbgmbh.de. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 The controller has designated a data protection officer for this website. He can be reached as follows: "Nina Poloczek - np@crakblocker.com"
2) Data Collection When You Visit Our Website
2.1 When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
3) Contacting Us
3.1 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the WhatsApp news service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp in connection with a specific business transaction (e.g. an order placed), we will store and use the mobile telephone number you use at WhatsApp and - if provided - your first name and surname in accordance with Art. 6 para. 1 lit. b. GDPR to process and answer your request. Based on the same legal basis, we will ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address), if necessary, in order to be able to allocate your enquiry to a specific transaction.
If you use our WhatsApp contact for general enquiries (e.g. about the range of services, availability or our website), we will store and use the mobile phone number you use at WhatsApp and - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR based on our justified interest in the efficient and prompt provision of the requested information.
Your data will always be used only to answer your request via WhatsApp. Your data will not be passed on to third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book saves only the WhatsApp contact data of those users who have also contacted us via WhatsApp.
This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his WhatsApp telephone number from the address books of his chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR when using the app on his device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's data protection information: https://www.whatsapp.com
In the course of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.2 When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.
The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.
4) Data Processing When Opening a Customer Account and for Contract Processing
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
5) Use of Client Data for Direct Advertising
5.1 Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration for the purpose of tracing any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the promotional purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data, or we reserve the right to a more extensive use your data which is permitted by law and about which we inform you in this declaration.
5.2 Sending the newsletter to existing customers
If you have provided us with your e-mail address when purchasing products, we reserve the right to regularly send you offers for products similar to those already purchased by e-mail. Pursuant to Section 7 (3) German law against unfair competition, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the future use of your e-mail address for the aforementioned advertising purpose at any time by notifying the controller named at the beginning of this document. In this regard, you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
6) Processing of Data for the Purpose of Order Handling
6.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period of time within the framework of our statutory duty to inform pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
6.2 Use of Payment Service Providers
- Paypal
Online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider for which you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance payments, you will also be asked to provide certain personal data (first name and surname, street, house number, postcode, city, date of birth, e-mail address, telephone number, if applicable data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers, this data is passed on to the provider by us for the purpose of a credit check in accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by you as well as further data (such as shopping cart, invoice total, order history, payment history), the provider checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
6.3 Credit Check
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a creditworthiness check to the following service provider in accordance with Art. 6 (1) point GDPR:
Creditreform
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, these are based on recognized scientifical mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit assessment regarding the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual processing of payments.
7) Rights of the Data Subject
7.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:
- Right of access by the data subject pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
7.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
8) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed basis on an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.
General Cookies
Cookies from WordPress
Name
Purpose
Validity
wordpress_test_cookie
This cookie determines whether the use of cookies has been disabled in the browser. Duration of storage: Until the end of the browser session (will be deleted when closing your internet browser).
Session
PHPSESSID
This cookie stores your current session with respect to PHP applications, ensuring that all features of this website based on the PHP programming language are fully displayed. Duration of storage: Until the end of the browser session (will be deleted when closing your internet browser).
Session
wordpress_akm_mobile
These cookies are only used for the administration area of WordPress.
1 Year
wordpress_logged_in_akm_mobile
These cookies are only used for the administration area of WordPress and do not apply to other site visitors.
Session
wp-settings-akm_mobile
These cookies are only used for the administration area of WordPress and do not apply to other site visitors.
Session
wp-settings-time-akm_mobile
These cookies are only used for the administration area of WordPress and do not apply to other site visitors.
Session
ab
Is used for A / B testing of new features.
Session
akm_mobile
saves if the visitor wants to see the mobile version of a website.
1 Day
Cookies from WooCommerce
Name
Purpose
Validity
woocommerce_cart_hash
This cookie is required to store the items in your cart for the order process.
Session
woocommerce_items_in_cart
Helps WooCommerce determine when the contents of the cart / data change.
Session
tk_ai
Saves a randomly generated anonymous ID. This is only used within the dashboard area (/ wp-admin) and, if enabled, is used for the usage control.
Session
wp_woocommerce_session_
Contains a unique code for each customer, so he knows where to find the shopping cart data in the database for each customer.
2 Days
wc_fragments_
Saves a randomly generated anonymous ID. This is only used within the dashboard area (/ wp-admin) and, if enabled, is used for the usage control.
Session
wc_cart_hash
Saves a randomly generated anonymous ID. This is only used within the dashboard area (/ wp-admin) and, if enabled, is used for the usage control.
Session
Cookies from WPML
Name
Purpose
Validity
_icl_current_language
Saves the language selected by the user.
1 Year
_icl_visitor_lang_js
Saves the redirected language when changing the language.
1 Year
wpml_browser_redirect_test
This cookie determines whether the use of cookies has been disabled in the browser.
1 Year
wpml_referer_url
Saves the last requested URL in the frontend.
1 Year
Contact Form 7
The Plugin Contact Form 7 is a service for creating contact forms. The PlugIn Contact Form 7 only serves to forward registered form data to the e-mail address of our company. An additional storage, e.g. in the WordPress database, does not take place. Further information and the valid data protection regulations of Contact Form 7 can be found under href="https://de.wordpress.org/plugins/contact-form-7/">https://de.wordpress.org/plugins/contact-form-7/ and https://rocklobster.in/ Contact Form 7 is open source software. Communication between browser and server is exclusively via HTTPS (SSL/TLS) encryption.
Cookies from DSGVO AIO for WordPress
Name
Purpose
Validity
dsgvoaio
This LocalStorage key / value stores which services the user has agreed to or not.
variable
_uniqueuid
This LocalStorage key / value stores a generated ID so that the user's opt-in / opt-out actions can be documented. The ID is stored anonymously.
variable
dsgvoaio_create
This LocalStorage key / value stores the time when _uniqueuid was generated.
variable
dsgvoaio_vgwort_disable
This LocalStorage key / value stores whether the service VG word standard is allowed or not (setting of the page operator).
variable
dsgvoaio_ga_disable
This LocalStorage key / value stores whether the service Google Analytics Standard is allowed or not (Hiring the site operator).
variable
Google Maps
We use Google Maps from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website.
By using the features of this map, data will be transmitted to Google. What data Google collects and how it uses this information can be found on https://www.google.com/intl/en/policies/privacy/ .
Cookies from Google Maps
CGICUsed by Google to store user settings and information when pages with Google Maps are displayed on them.6 months
Name
Purpose
Validity
NID
Cookie for analysis of website statistics by Google.
1 year
CONSENT
Cookie for analysis of website statistics by Google.
2 years
HSID, SID
Includes encrypted entries of your Google Account and last login time to protect against attacks and data theft from form entries.
2 years
SSID
Google-Cookies without further specification.
2 years
SAPISID
Google-Cookies without further specification.
2 years
SIDCC
Google-Cookies without further specification.
2 years
OTZ
Google-Cookies without further specification.
2 years
APISID
Google-Cookies without further specification.
2 years
1P_JAR
Cookie for analysis of website statistics by Google.
1 year
SEARCH_SAMESITE
SameSite prevents the browser from sending this cookie along with cross-site requests. The main objective is to reduce the risk of information leaks between countries of origin. It also provides some protection against cross-site request forgery attacks.
6 months
DV
Used by Google to store user settings and information when pages with Google Maps are displayed on them.
session
YouTube
On this video service page, we use YouTube, the company YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
By accessing pages on our website that have integrated YouTube videos, data will be transmitted to YouTube, stored and evaluated.
If you have a YouTube account and you're signed in, that information will be associated with your personal account and the data stored in it.
What data Google collects and what this data is used for can be found on https://www.google.com/intl/en/policies/privacy/ .
Cookies from Youtube
Name
Purpose
Validity
SID
Google uses cookies such as the NID and SID cookies to customize advertising in Google products such as Google search. Using such cookies, Google records, for example, your latest searches, your previous interactions with an advertiser's ads or search results, and your visits to an advertiser's website. In this way, Google can display customized advertising on Google. Other Google products such as YouTube or Doubleclick also use these cookies to select more relevant advertising.
1 Year
VISITOR_INFO1_LIVE
This is a cookie that YouTube sets to calculate the bandwidth of the user. This information is used to determine whether the user should use the player's new or old user interface.
0-365 Days
PREF
This cookie stores the user's preferences and other information. This includes in particular the preferred language, the number of search results to be displayed on the page and the decision whether the SafeSearch filter should be activated by Google or not.
5 Years
APISID
YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites.
10 Years
YSC
This cookie is set by the video service YouTube on websites with embedded YouTube videos.
1 Year
GPS
YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites.
1 Day
SSID
YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites.
1 Year
LOGIN_INFO
YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites.
2 Years
SAPISID
This domain is owned by Google Inc. Google is primarily known as a search engine, but the company offers a wide range of products and services. The main source of income is advertising. Google tracks user movements extensively - both through its own products and websites and with the help of the diverse technologies integrated into millions of websites worldwide.
1 Year
HSID
Used by Google in connection with SID to check the Google user account and the last login time https://policies.google.com/technologies/types?hl=de
1 Year
as of: 23.11.2024
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Crak Blocker GmbH, Ludwigshafener Str. 24-26, 40229 Düsseldorf, Deutschland, Tel.: 0211-2611202, Fax: 0211-2611302, E-Mail: info@cbgmbh.de. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 The controller has designated a data protection officer for this website. He can be reached as follows: "Nina Poloczek - np@crakblocker.com"
2) Data Collection When You Visit Our Website
2.1 When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
3) Contacting Us
3.1 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the WhatsApp news service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp in connection with a specific business transaction (e.g. an order placed), we will store and use the mobile telephone number you use at WhatsApp and - if provided - your first name and surname in accordance with Art. 6 para. 1 lit. b. GDPR to process and answer your request. Based on the same legal basis, we will ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address), if necessary, in order to be able to allocate your enquiry to a specific transaction.
If you use our WhatsApp contact for general enquiries (e.g. about the range of services, availability or our website), we will store and use the mobile phone number you use at WhatsApp and - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR based on our justified interest in the efficient and prompt provision of the requested information.
Your data will always be used only to answer your request via WhatsApp. Your data will not be passed on to third parties.
Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book saves only the WhatsApp contact data of those users who have also contacted us via WhatsApp.
This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his WhatsApp telephone number from the address books of his chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR when using the app on his device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's data protection information: https://www.whatsapp.com
In the course of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.2 When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.
The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.
4) Data Processing When Opening a Customer Account and for Contract Processing
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
5) Use of Client Data for Direct Advertising
5.1 Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration for the purpose of tracing any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the promotional purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data, or we reserve the right to a more extensive use your data which is permitted by law and about which we inform you in this declaration.
5.2 Sending the newsletter to existing customers
If you have provided us with your e-mail address when purchasing products, we reserve the right to regularly send you offers for products similar to those already purchased by e-mail. Pursuant to Section 7 (3) German law against unfair competition, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the future use of your e-mail address for the aforementioned advertising purpose at any time by notifying the controller named at the beginning of this document. In this regard, you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
6) Processing of Data for the Purpose of Order Handling
6.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period of time within the framework of our statutory duty to inform pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.
In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
6.2 Use of Payment Service Providers
- Paypal
Online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider for which you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance payments, you will also be asked to provide certain personal data (first name and surname, street, house number, postcode, city, date of birth, e-mail address, telephone number, if applicable data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers, this data is passed on to the provider by us for the purpose of a credit check in accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by you as well as further data (such as shopping cart, invoice total, order history, payment history), the provider checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
6.3 Credit Check
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a creditworthiness check to the following service provider in accordance with Art. 6 (1) point GDPR:
Creditreform
The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, these are based on recognized scientifical mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit assessment regarding the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for contractual processing of payments.
7) Rights of the Data Subject
7.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:
- Right of access by the data subject pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
7.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
8) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed basis on an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.
General Cookies
Cookies from WordPress
| Name | Purpose | Validity |
|---|---|---|
| wordpress_test_cookie | This cookie determines whether the use of cookies has been disabled in the browser. Duration of storage: Until the end of the browser session (will be deleted when closing your internet browser). | Session |
| PHPSESSID | This cookie stores your current session with respect to PHP applications, ensuring that all features of this website based on the PHP programming language are fully displayed. Duration of storage: Until the end of the browser session (will be deleted when closing your internet browser). | Session |
| wordpress_akm_mobile | These cookies are only used for the administration area of WordPress. | 1 Year |
| wordpress_logged_in_akm_mobile | These cookies are only used for the administration area of WordPress and do not apply to other site visitors. | Session |
| wp-settings-akm_mobile | These cookies are only used for the administration area of WordPress and do not apply to other site visitors. | Session |
| wp-settings-time-akm_mobile | These cookies are only used for the administration area of WordPress and do not apply to other site visitors. | Session |
| ab | Is used for A / B testing of new features. | Session |
| akm_mobile | saves if the visitor wants to see the mobile version of a website. | 1 Day |
Cookies from WooCommerce
| Name | Purpose | Validity |
|---|---|---|
| woocommerce_cart_hash | This cookie is required to store the items in your cart for the order process. | Session |
| woocommerce_items_in_cart | Helps WooCommerce determine when the contents of the cart / data change. | Session |
| tk_ai | Saves a randomly generated anonymous ID. This is only used within the dashboard area (/ wp-admin) and, if enabled, is used for the usage control. | Session |
| wp_woocommerce_session_ |
Contains a unique code for each customer, so he knows where to find the shopping cart data in the database for each customer. | 2 Days |
| wc_fragments_ |
Saves a randomly generated anonymous ID. This is only used within the dashboard area (/ wp-admin) and, if enabled, is used for the usage control. | Session |
| wc_cart_hash |
Saves a randomly generated anonymous ID. This is only used within the dashboard area (/ wp-admin) and, if enabled, is used for the usage control. | Session |
Cookies from WPML
| Name | Purpose | Validity |
|---|---|---|
| _icl_current_language | Saves the language selected by the user. | 1 Year |
| _icl_visitor_lang_js | Saves the redirected language when changing the language. | 1 Year |
| wpml_browser_redirect_test | This cookie determines whether the use of cookies has been disabled in the browser. | 1 Year |
| wpml_referer_url | Saves the last requested URL in the frontend. | 1 Year |
Contact Form 7
The Plugin Contact Form 7 is a service for creating contact forms. The PlugIn Contact Form 7 only serves to forward registered form data to the e-mail address of our company. An additional storage, e.g. in the WordPress database, does not take place. Further information and the valid data protection regulations of Contact Form 7 can be found under href="https://de.wordpress.org/plugins/contact-form-7/">https://de.wordpress.org/plugins/contact-form-7/ and https://rocklobster.in/ Contact Form 7 is open source software. Communication between browser and server is exclusively via HTTPS (SSL/TLS) encryption.
Cookies from DSGVO AIO for WordPress
| Name | Purpose | Validity |
|---|---|---|
| dsgvoaio | This LocalStorage key / value stores which services the user has agreed to or not. | variable |
| _uniqueuid | This LocalStorage key / value stores a generated ID so that the user's opt-in / opt-out actions can be documented. The ID is stored anonymously. | variable |
| dsgvoaio_create | This LocalStorage key / value stores the time when _uniqueuid was generated. | variable |
| dsgvoaio_vgwort_disable | This LocalStorage key / value stores whether the service VG word standard is allowed or not (setting of the page operator). | variable |
| dsgvoaio_ga_disable | This LocalStorage key / value stores whether the service Google Analytics Standard is allowed or not (Hiring the site operator). | variable |
Google Maps
We use Google Maps from Google Inc. (1600 Amphitheater Parkway Mountain View, CA 94043, USA) on our website.
By using the features of this map, data will be transmitted to Google. What data Google collects and how it uses this information can be found on https://www.google.com/intl/en/policies/privacy/ .
Cookies from Google Maps
CGICUsed by Google to store user settings and information when pages with Google Maps are displayed on them.6 months
| Name | Purpose | Validity |
|---|---|---|
| NID | Cookie for analysis of website statistics by Google. | 1 year |
| CONSENT | Cookie for analysis of website statistics by Google. | 2 years |
| HSID, SID | Includes encrypted entries of your Google Account and last login time to protect against attacks and data theft from form entries. | 2 years |
| SSID | Google-Cookies without further specification. | 2 years |
| SAPISID | Google-Cookies without further specification. | 2 years |
| SIDCC | Google-Cookies without further specification. | 2 years |
| OTZ | Google-Cookies without further specification. | 2 years |
| APISID | Google-Cookies without further specification. | 2 years |
| 1P_JAR | Cookie for analysis of website statistics by Google. | 1 year |
| SEARCH_SAMESITE | SameSite prevents the browser from sending this cookie along with cross-site requests. The main objective is to reduce the risk of information leaks between countries of origin. It also provides some protection against cross-site request forgery attacks. | 6 months |
| DV | Used by Google to store user settings and information when pages with Google Maps are displayed on them. | session |
YouTube
On this video service page, we use YouTube, the company YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
By accessing pages on our website that have integrated YouTube videos, data will be transmitted to YouTube, stored and evaluated.
If you have a YouTube account and you're signed in, that information will be associated with your personal account and the data stored in it.
What data Google collects and what this data is used for can be found on https://www.google.com/intl/en/policies/privacy/ .
Cookies from Youtube
| Name | Purpose | Validity |
|---|---|---|
| SID | Google uses cookies such as the NID and SID cookies to customize advertising in Google products such as Google search. Using such cookies, Google records, for example, your latest searches, your previous interactions with an advertiser's ads or search results, and your visits to an advertiser's website. In this way, Google can display customized advertising on Google. Other Google products such as YouTube or Doubleclick also use these cookies to select more relevant advertising. | 1 Year |
| VISITOR_INFO1_LIVE | This is a cookie that YouTube sets to calculate the bandwidth of the user. This information is used to determine whether the user should use the player's new or old user interface. | 0-365 Days |
| PREF | This cookie stores the user's preferences and other information. This includes in particular the preferred language, the number of search results to be displayed on the page and the decision whether the SafeSearch filter should be activated by Google or not. | 5 Years |
| APISID | YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites. | 10 Years |
| YSC | This cookie is set by the video service YouTube on websites with embedded YouTube videos. | 1 Year |
| GPS | YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites. | 1 Day |
| SSID | YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites. | 1 Year |
| LOGIN_INFO | YouTube is a platform for the provision and publication of videos and is part of Google. YouTube collects user data via videos embedded in websites, which are merged with profile data from other Google services. In this way, website visitors can be shown targeted advertising via a wide range of their own and third-party websites. | 2 Years |
| SAPISID | This domain is owned by Google Inc. Google is primarily known as a search engine, but the company offers a wide range of products and services. The main source of income is advertising. Google tracks user movements extensively - both through its own products and websites and with the help of the diverse technologies integrated into millions of websites worldwide. | 1 Year |
| HSID | Used by Google in connection with SID to check the Google user account and the last login time https://policies.google.com/technologies/types?hl=de | 1 Year |