Privacy Policy
The responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Mind Hill UG (limited liability)
Your Data Subject Rights
You can exercise the following rights at any time using the contact details of our data protection officer listed below:
- Information about your data stored by us and its processing (Art. 15 GDPR),
- Correction of incorrect personal data (Art. 16 GDPR),
- Deletion of your data stored by us (Art. 17 GDPR),
- Restriction of data processing, insofar as we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR), and
- Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you may revoke it at any time with effect for the future.
You may lodge a complaint at any time with a supervisory authority, for example with the supervisory authority of the federal state of your residence or with the authority responsible for us as the responsible entity.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Collection of General Information When Visiting Our Website
Type and Purpose of Processing:
When you access our website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address, and similar information.
They are processed in particular for the following purposes:
- Ensuring a smooth connection to the website,
- Ensuring smooth use of our website,
- Evaluation of system security and stability, and
- For further administrative purposes.
We do not use your data to draw conclusions about your person. Information of this type may be evaluated statistically by us in order to optimize our website and the underlying technology.
Legal Basis:
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Duration:
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case for data that serve to provide the website once the respective session has ended.
Provision Required or Mandatory:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services and functions may not be available or may be limited. For this reason, an objection is excluded.
Cookies
Type and Purpose of Processing:
Like many other websites, we also use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
This allows us to receive certain data such as IP address, browser used, and operating system.
Cookies cannot be used to start programs or transmit viruses to a computer. Using the information contained in cookies, we can make navigation easier for you and enable the correct display of our websites.
Under no circumstances will the data collected by us be passed on to third parties or linked to personal data without your consent.
Of course, you can generally view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via the settings of your browser. Please use the help functions of your internet browser to find out how you can change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
Storage Duration and Cookies Used:
Insofar as you allow us to use cookies through your browser settings or consent, the following cookies may be used on our websites:
JS Cookies - 7 days
Insofar as these cookies may (also) affect personal data, we will inform you about this in the following sections.
You can delete individual cookies or the entire cookie inventory via your browser settings. In addition, you will receive information and instructions on how these cookies can be deleted or their storage blocked in advance. Depending on the provider of your browser, you can find the necessary information under the following links:
- Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
- Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
- Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
- Opera: http://www.opera.com/de/help
- Safari: https://support.apple.com/kb/Ph27191?locale=de_DE&viewlocale=de_DE
Registration on Our Website
Type and Purpose of Processing:
When registering to use our personalized services, some personal data is collected, such as name, address, contact and communication data (e.g. telephone number and email address). If you are registered with us, you can access content and services that we only offer to registered users. Registered users also have the option to change or delete the data provided during registration at any time if required. Of course, we will also provide you at any time with information about the personal data we have stored about you.
Legal Basis:
The processing of the data entered during registration is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
If registration serves the performance of a contract to which the data subject is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.
Recipients:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage Duration:
Data in this context will only be processed as long as the corresponding consent exists. Thereafter, they will be deleted unless statutory retention obligations conflict with this. To contact us in this regard, please use the contact details provided at the end of this privacy policy.
Provision Required or Mandatory:
The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
Provision of Paid Services
Type and Purpose of Processing:
In order to provide paid services, we request additional data from you, such as payment details, in order to be able to process your order.
Legal Basis:
The processing of data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b GDPR.
Recipients:
Recipients of the data may be processors.
Storage Duration:
We store this data in our systems until the statutory retention periods have expired. These generally amount to 6 or 10 years for reasons of proper accounting and tax law requirements.
Provision Required or Mandatory:
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to the content and services we offer.
Contact Form
Type and Purpose of Processing:
The data you enter will be stored for the purpose of individual communication with you. For this purpose, providing a valid email address and your name is required. This serves to assign the request and subsequently respond to it. Providing additional data is optional.
Legal Basis:
The processing of the data entered into the contact form is based on a legitimate interest (Art. 6 para. 1 lit. f GDPR).
By providing the contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to request an offer, the processing of the data entered into the contact form is carried out for the implementation of pre-contractual measures (Art. 6 para. 1 lit. b GDPR).
Recipients:
Recipients of the data may be processors.
Storage Duration:
Data will be deleted at the latest 6 months after processing the request.
If a contractual relationship arises, we are subject to statutory retention periods under the German Commercial Code (HGB) and delete your data after these periods have expired.
Provision Required or Mandatory:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your email address, and the reason for the request.
Use of Google Analytics
Type and Purpose of Processing:
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter: “Google”). Google Analytics uses so-called “cookies”, i.e. text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on these websites, your IP address will, however, be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purposes of data processing lie in the evaluation of website usage and in the compilation of reports on website activities. Based on the use of the website and the internet, further related services are then to be provided.
Legal Basis:
The processing of data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
Recipients:
The recipient of the data is Google as a processor. For this purpose, we have concluded the corresponding data processing agreement with Google.
Storage Duration:
The data will be deleted as soon as they are no longer required for our recording purposes.
Third Country Transfer:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Provision Required or Mandatory:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Revocation of Consent:
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser add-on to disable Google Analytics.
In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future as long as the cookie remains installed in your browser.
Profiling:
With the help of the tracking tool Google Analytics, the behavior of website visitors can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.
Use of Google Maps
Type and Purpose of Processing:
On this website, we use the Google Maps service. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
Further information about data processing by Google can be found in the Google privacy policy. There you can also change your personal data protection settings in the privacy center.
Detailed instructions on managing your own data in connection with Google products can be found here.
Legal Basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipients:
By visiting the website, Google receives information that you have accessed the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data will be directly assigned to your account.
If you do not wish the assignment to your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for purposes of advertising, market research, and/or needs-based design of its website. Such an evaluation takes place in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
Storage Duration:
We do not collect any personal data through the integration of Google Maps.
Third Country Transfer:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Revocation of Consent:
If you do not want Google to collect, process, or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or only to a limited extent.
Provision Required or Mandatory:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
Google AdWords
Type and Purpose of Processing:
Our website uses Google Conversion Tracking. The operating company of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you reached our website via an advertisement placed by Google, a cookie is set on your computer by Google AdWords. The cookie for conversion tracking is set when a user clicks on an advertisement placed by Google.
If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognize that the user clicked on the advertisement and was redirected to that page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.
Legal Basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).
Recipients:
With each visit to our website, personal data, including your IP address, is transmitted to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.
Our company does not receive any information from Google that could be used to identify the data subject.
Storage Duration:
These cookies expire after 30 days and are not used for personal identification.
Third Country Transfer:
Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.
Revocation of Consent:
If you do not wish to participate in tracking, you can refuse the setting of the required cookie – for example, via a browser setting that generally deactivates the automatic setting of cookies or by configuring your browser so that cookies from the domain “googleleadservices.com” are blocked.
Please note that you must not delete the opt-out cookies as long as you do not wish to have measurement data recorded. If you have deleted all cookies in your browser, you must set the respective opt-out cookie again.
Provision Required or Mandatory:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Changes to Our Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions to the Data Protection Officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
info@stororama.com
The privacy policy was created using the privacy policy generator of activeMind
