Data privacy statement
1. Name and contact details of the Data Controller
This data protection information applies to the data processing by the following companies:
a) Controller: ADORATIO SCHOKOLADENKUNST NASCHWERK GmbH & Co. KG
General Partner: ADORATIO Verwaltungsgesellschaft mbH
Managing Director: Susanne Engler
Address: Am Schlossberg 2, 01796 Struppen, District of Thürmsdorf
Telephone: +49 35021 99 648
Fax: +49 35021 99 657
2. The gathering and storage of personal data, as well as the nature and purpose of its use
a) When visiting the website
When you access our website http://www.adoratio-schokoladenkunst.de information will automatically be sent to our website’s server by the browser that is deployed on your terminal. This information is temporarily saved in a log file. The following information is gathered, in that respect, and saved until such time as it is automatically deleted:
• The IP address of the computer making the request;
• the date and time of access,
• the name and URL of the file accessed,
• the website from which our website is accessed (referring URL),
• the browser and any operating system on your computer, as well as the name of your access provider.
The data specified will be processed by us for the following purposes:
• Guaranteeing a smooth connection to the website,
• guaranteeing comfortable use of our website,
• evaluating the system security and stability; and
• for further administrative purposes.
The legal basis for the data processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest is in gathering data for the purposes listed above. We will never use the data gathered for the purpose of drawing conclusions concerning your person.
b) When you use our contact form
If you have any questions of any kind, we offer you the option of contacting us via a form provided on the website. It is necessary, in that respect, to give a valid e-mail address, so that we know who sent us the enquiry and can answer it. Any further details are provided voluntarily.
The processing of your data for the purpose of contacting us is carried out under Art. 6(1)(1)(a) GDPR, based on your consent provided voluntarily. Art. 6(1)(1)(b) and (f) GDPR come into consideration as a further basis.
The personal data gathered by us for use of the contact form is automatically erased once the enquiry submitted by you has been answered.
c) Newsletter data
If you would like to receive our newsletter, we need your e-mail address, as well as information that allows us to check that you are the owner of the e-mail address given and are in agreement with receiving the newsletter. No further data is gathered. We only use this data to send the required information, and do not pass it on to third parties.
You may revoke the consent given to the data and the e-mail address being stored, and the use of the latter to send the newsletter, at any time, for example via the “Unsubscribe” link in the newsletter.
3. Disclosure of data
Your personal data will not be transmitted to third parties for any purposes other than the ones listed below.
We only pass on your personal data to third parties if:
• You have explicitly given your consent to it under Art. 6(1)(1)(f) GDPR;
• it is necessary to pass it on, under Art. 6(1)(1)(f) GDPR, in order to assert, exercise or defend legal claims, and no reason exists to assume that you have an overwhelming interest, worthy of protection, in your data not being passed on;
• in the event that a statutory obligation to pass on your data exists, under Art. 6(1)(1)(c) GDPR, as well as
• it being statutorily admissible and necessary, under Art. 6(1)(1)(b) GDPR, for handling contractual relationships with you.
Information is stored in the cookie, which is always provided in connection with the specific terminal used. This does not, however, mean that we thereby directly become aware of your identity.
To optimise usability, we likewise also use temporary cookies, which are stored on your terminal for a certain fixed period of time. Should you visit our website again to use our services, the website automatically recognises that you have already visited us, what information you have entered and which settings you have chosen, so you do not have to re-enter them.
The data processed by cookies is necessary for the purposes mentioned, in order to preserve our legitimate interests, as well as those of third parties, pursuant to Art. 6(1)(1)(f) GDPR.
Most browsers accept cookies automatically. You can, however, configure your browser in such a way that no cookies are saved on your computer, or that a notice always appears before a new cookie is saved. Completely deactivating cookies may, however, lead to you not being able to use all the functions of our website.
5. Analysis tools
a) Tracking tools
The tracking measures cited by us below, which may be deployed by us, are carried out based on Art. 6(1)(1)(f) GDPR. With the tracking measures deployed, we are making sure that our website is designed in line with requirements and is optimised on an ongoing basis. Secondly, we deploy the tracking measures in order to statistically record the use of our website and for the purpose of evaluating the optimisation of our website for you. Such interests are to be considered legitimate within the meaning of the above-mentioned regulation.
The respective data processing purposes and data categories can be inferred from the corresponding tracking tools.
b) Google Analytics
For the purpose of designing our website in line with requirements and ongoing optimisation of our pages, we may use Google Analytics, a web analysis service of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). Pseudonymised usage profiles are created, in this connection, and cookies used (see Clause 4). The information generated by the cookie on your use of this website, such as
• browser type/version
• operating system used,
• Referrer URL (the page visited previously),
• Host name of the accessing computer (IP address),
• Time of the server query,
is transmitted to a Google server in the USA and saved there. The information will be used to evaluate use of the website, compile reports on website activities, and provide further services associated with the use of the website and the Internet for market research purposes and to design these web pages in line with requirements. This information will also, as the case may be, be transmitted to third parties, if the latter is required by law or in so far as third parties process such data on a contract-processing basis. Your IP address will under no circumstances be linked to other Google data. The IP addresses will be anonymised, making it impossible to allocate them to a particular person (IP masking).
You may prevent cookies from being installed by setting your browser software accordingly; however, we would like to point out to you that if you do so, you may not necessarily be able to use all functions of this website in their entirety.
You can, furthermore, prevent the data generated by the cookie relating to your use of the website including your IP address from being recorded by Google, as well as the processing of such data by Google, by downloading and installing the browser plug-in available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, in particular with browsers and mobile terminals, you can take an additional step to prevent your data from being recorded by Google Analytics by clicking on this link. An opt-out cookie is installed, which prevents data on your use of this website being gathered in future when visiting this website. The opt-out cookie only applies in this browser, and only to our website, and will be placed on your device. If you delete the cookies in this browser, you will need to re-set the opt-out cookie.
Further information on data protection in connection with Google Analytics is available on the Google Analytics help pages (https://support.google.com/analytics/answer/6004245?hl=de).
c) Google AdWords Conversion Tracking
In order to record the use of our website statistically, and for the purpose of evaluating the optimisation of our website, we may also use Google Conversion Tracking. This means that if you come to our website via a Google advertisement, a cookie is placed on your computer by Google AdWords (see Clause 4).
These cookies lose their validity after 30 days, and do not serve for personal identification. Should the user visit certain pages of the website of the Adwords customer and the cookie not yet have expired, Google and the Customer may recognise that the user has clicked on the advertisement and has been redirected to this site.
Every Adwords customer receives a different cookie. Cookies can thus not be traced via the websites of Adwords customers. The information obtained with the aid of the conversion cookie is used to create conversion statistics for AdWords customers who have chosen to enable conversion tracking. The AdWords customers see the total number of users who clicked on their advertisement and were re-directed to a page equipped with a conversion tracking tag. They do not, however, receive any information which can personally identify users.
6. Social media plug-ins
Based on Art. 6(1)(1)(f) GDPR, we may use social plug-ins for the Facebook, Twitter and Instagram social networks in order to draw the public’s attention to our company. The underlying promotional purpose is deemed a legitimate interest within the meaning of the GDPR. The responsibility for operating the website in such a manner that it is data privacy-compliant is guaranteed by the respective provider. Said plug-ins are integrated using the “two-click method”, in order to protect visitors to our website in the best way possible.
Facebook social media plug-ins may be deployed on our website in order for users of our website to have a more personalised user experience. For this purpose, we use the “LIKE” or “SHARE” button. The latter is a service provided by Facebook.
Whenever you access a page on our website that contains one of these plug-ins, your browser establishes a direct link to Facebook’s servers. The plug-in content is transferred from Facebook directly to your browser, which integrates the content into the webpage.
Integrating the plug-in sends information to Facebook indicating that you have accessed the corresponding page on our website, even if you do not have a Facebook account or are not logged into Facebook just now. Such information (including your IP address) is transmitted directly by your browser to one of Facebook’s servers in the USA where it is saved.
When you are simultaneously logged into Facebook, this enables to Facebook to share information about your visit to our website with your Facebook account. If you interact with the plug-ins, for example press the “LIKE” or "SHARE" button, the corresponding information is likewise transmitted directly to a Facebook server and saved there. In addition, the information is published on your Facebook profile, and shown to your Facebook friends.
Facebook may use such information for the purposes of advertising, conducting market research, and designing the Facebook pages in line with user requirements. For this purpose, use, interest and relationship profiles are created on Facebook, e.g. in order to evaluate your use of our website in regard to the advertisements shown to you on Facebook, inform other Facebook users on your activities on our website, or provide further services connected with the use of Facebook.
If you prefer Facebook not to share information about your visit to our website with your Facebook account, you need to log out of Facebook prior to visiting our website.
Plug-ins of the Twitter Inc. (Twitter) short news items network may be integrated into our web pages. You can recognise the Twitter plug-ins (“Tweet” button) by the Twitter logo on our site. You can find an overview of the Tweet buttons here (https://about.twitter.com/resources/buttons).
When you access a page on our website that includes one of these plug-in, a direct connection between your web browser and the Twitter server is produced. As a result, Twitter receives the information that you have visited our website with your IP address. If you click the Twitter "Tweet" button while you are logged into your Twitter account, you can link the content of our pages to your Twitter profile. As a result, Twitter can assign the visit to our pages to your user account. We are pointing out that we, as the provider of the pages, are not aware of the content of the data transmitted or its use by Twitter.
If you do not wish Twitter to be able to allocate your visit to our pages to your Twitter user account, please log out of your Twitter user account.
Instagram social plug-ins (“plug-ins”), operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”) may also be used on our website.
The plug-ins are marked with an Instagram logo, for example in the form of an “Instagram camera”.
Whenever you access a page on our website that contains one of these plug-ins, your browser establishes a direct link to Instagram’s servers. The plug-in content is transferred from Instagram directly to your browser, which integrates the content into the web page. Integrating the plug-in sends information to Instagram indicating that you have accessed the corresponding page on our website, even if you do not have an Instagram account or are not logged into Instagram just now.
Such information (including your IP address) is transmitted directly by your browser to one of Instagram’s servers in the USA where it is saved. When you are simultaneously logged into Instagram, this enables to Instagram to share information about your visit with your Instagram account. If you interact with the plug-ins, for example press the “Instagram” button, such information is likewise transmitted directly to a server of Instagram, and saved there.
In addition, the information is published in your Instagram account, and shown to your contacts there.
If you prefer Instagram not to share information about your visit to our website with your Instagram account, you need to log out of Instagram prior to visiting our website.
7. Rights of data subjects
You have the right:
• Pursuant to Art. 15 GDPR, to request information on your personal data processed by us. You can in particular request information about the purposes of the processing, the category of personal data, the category of recipients to whom your data has been or will be disclosed, the scheduled duration of storage, the existence of a right of correction, erasure, restriction of the processing or objection, the existence of a right of appeal, the origin of your data, in so far as it was not gathered by us, and also the existence of automated decision-making, including profiling and any meaningful information on the details of the latter;
• pursuant to Art. 16 GDPR, you are entitled to request the rectification of any incorrect personal data or the completion of any incomplete personal data stored by us, without delay;
• pursuant to Art. 17 GDPR, you are entitled to request the erasure of any of your personal data stored by us, as long as the data processing is not required in order to exercise the right of free speech and information, to fulfil a legal obligation, for reasons of public interest, or to assert, exercise or defend legal claims;
• pursuant to Art. 18 GDPR, you are entitled to request the restriction of processing of your personal data in so far as you dispute the correctness of the data, if the processing of the data is unlawful, but you reject its erasure, and if we no longer require the data, but you require it to assert, exercise or defend legal claims, or if you have objected to the data processing pursuant to Art. 21 GDPR;
• pursuant to Art. 20 GDPR, you are entitled to require from us that you receive the personal data that you have made available to us in a structured, common and machine-readable format, or that the data is transmitted to another data controller;
• pursuant to Art. 7(3) GDPR, you are entitled to revoke your consent given by notifying us accordingly at any time. The consequence of this is that we can no longer, in the future, continue the data processing that was based on such consent; and
• pursuant to Art. 77 GDPR, you can complain to a supervisory authority. As a rule, you can, for this purpose, contact the supervisory authority at your usual place of residence or place of work or our registered office.
8. The right to object
Should your personal data be processed on the basis of legitimate interests pursuant to Art. 6(1)(1)(f) GDPR, you are entitled, under Art. 21 GDPR, to file an objection against the processing of your personal data, in so far as grounds exist for the latter which arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without details of any special situation having to be provided by you.
Should you wish to make use of your right of revocation or right of objection, just send an e-mail to the following e-mail address: firstname.lastname@example.org
9. Data security
Within the context of the website visit, we may use the widespread SSL (Secure Socket Layer) technology in conjunction with the highest respective level of encryption that is supported by your browser. Generally, this means 256-bit encryption. Should your browser not support 256-bit encryption, we fall back on 128-bit v3 technology. Whether an individual page of our website is transmitted encrypted is something that you can recognise from the key or lock symbol in the lower status bar of your browser being shown as locked or closed.
In addition, we make use of suitable technical and organisational security measures, in order to partially or fully protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access by a third party. The security procedures we deploy are regularly enhanced to reflect technological progress.
10. Currency of this data privacy statement and amendments to it
This data privacy statement is currently valid. It was created in May 2018 (its status date).
By enhancing our website and services concerning it or based on amended statutory or official requirements, it may be necessary to alter this data privacy statement. The respective current data privacy statement may be accessed by you on the website at https://www.adoratio-schokoladenkunst.de/datenschutzerklaerung.html and printed out, at any time.