Privacy Policy

Privacy policy:  

1 Information about the collection of personal data  

(1) Below we inform you about the collection of personal data when using our website. Personal data is all data that can be personally associated with you, e.g. name, address, e-mail address, user behavior.  

(2) If you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and, if applicable, your telephone number) will be stored by us in order to answer your questions. We delete the data created in this context after storage is no longer necessary or restrict processing if there are statutory retention obligations. The legal basis for this is our legitimate interest within the meaning of Article 6 paragraph 1 letter f GDPR in answering your request and, if your request serves to conclude a contract, Article 6 paragraph 1 letter b GDPR.  

(3) If we use commissioned service providers for individual functions of our offer or wish to use your data for advertising purposes, we will inform you in detail about the respective procedures below. In doing so, we will also specify the criteria for the storage period.  

2 Your rights  

(1) You have the following rights against us with respect to your personal data:  

- Right to information (Art. 15 GDPR),  

- Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),  

- Right to restriction of processing (Art. 18 GDPR),  

- Right to withdraw consent (Art. 7 para. 3 GDPR).  

- Right to object to processing (see par. 3).  

- Right to information (Art. 19 GDPR),  

- Right to data portability (Art. 20 GDPR).  

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).  

(3) When processing personal data for the performance of tasks in the public interest (Art. 6 (1) sentence 1 lit. e GDPR) or for the purposes of legitimate interests (Art. 6 (1) sentence 1 lit. f GDPR) , you can object at any time with effect for the future to the processing of personal data concerning you. In the event of an objection, we must refrain from further processing your data for the aforementioned purposes, unless  

- there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or  

- processing is necessary for the establishment, exercise or defence of legal claims.  

You may object to the use of your data for direct marketing purposes at any time with effect for the future; this also applies to profiling to the extent that it is related to such direct marketing. In the event of an objection, we must refrain from further processing your data for direct marketing purposes.  

(4) To exercise your rights (with the exception of the right to lodge a complaint with a data protection supervisory authority), you can contact the office mentioned in § 1 paragraph 2.  

3 Collection of personal data when visiting our website  

(1) If you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to access our website, we collect the following data, which is technically necessary to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 lit. f GDPR ):  

- IP address  

- Date and time of the request  

- Time zone difference with Greenwich Mean Time (GMT)  

- Request content (specific page)  

- Access status/HTTP status code  

- Amount of data transferred  

- Website from which the request originates  

- Browser  

- Operating system and its interface  

- Language and version of the browser software.  

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in connection with the browser you use and through which the entity that sets the cookie (in this case, us) receives certain information. Cookies cannot execute programs or transmit viruses to your computer. They serve to make the Internet offer generally more user-friendly and effective (legal basis is Art. 6 para. 1 lit. f GDPR ).  

You can manage the cookie settings in your browser and, among other things, refuse to accept cookies in general or for our website and delete cookies that have already been placed. You can find more information about this in the help menu of your browser.  

(3) Use of cookies:  

(a) This website uses the following types of cookies, the scope and functionality of which are explained below:  

- Temporary cookies (for this purpose b).  

- Persistent cookies (c).  

(b) Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. These store a so-called session ID, which makes it possible to assign various requests from your browser to the common session. This allows your computer to be recognized when you visit our website again. Session cookies are deleted when you log out or close your browser.  

(c) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete cookies at any time via your browser's security settings.  

(d) You can adjust your browser settings to your preferences and, for example, refuse to accept third-party cookies or all cookies. We point out that you may not be able to use all the features of this website.  

4 Use of our web shop  

(1) If you wish to place an order in our online shop, it is necessary that you provide us with the personal data that we need to process your order and conclude the contract. Mandatory information required for the processing of the contract is marked separately, other information is voluntary. We process the data provided by you to process your order. For this purpose, we can pass on your payment data to our house bank. The legal basis for this is Art. 6 para. 6. 1 S. 1 lit. b DS -GVO.  

On this basis, your payment data will also be passed on to the respective payment service provider, depending on the payment method you have chosen. The payment service provider is responsible for your payment data. Information on in particular the responsible body of the payment service providers, the contact details of the data protection officers of the payment service providers and the categories of personal data processed by the payment service providers can be found at the following Internet address.  

For payments via PayPal (PayPal (Europe) S.à rl . et Cie , SCA, 22-24 Boulevard Royal, L-2449 Luxembourg): https://www.paypal.com/de/webapps/mpp/ua/privacy-full  

For payments via direct bank transfer: Klarna Bank AB ( publ ) Sveavägen 46 111 34 Stockholm Sweden): https://www.klarna.com/sofort/datenschutz/  

(2) Due to commercial and tax law, we are required to store your address, payment and order data for a period of ten years. However, after two years, we restrict processing, i.e. your data is only used to comply with legal obligations.  

(3) To prevent unauthorized access by third parties to your personal data, in particular financial data, the ordering process is encrypted using TLS technology.  

5 Use of Google Analytics  

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage.  

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.  

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser; however, we would like to point out that in this case you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) and the processing of this data by downloading and installing the browser plug- in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de .  

(4) This website uses Google Analytics with the extension "_ anonymizeIp ()". This means that IP addresses are processed in a shortened form, so that a personal reference can be excluded. Insofar as the data collected about you has a personal reference, this is immediately excluded and the personal data is therefore immediately deleted.  

(5) We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield , https://www.privacyshield.gov/EU-US-Framework . The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS -GVO.  

(6) Information about the third-party provider: Google LLC, 1600 Amphitheatre Parkway ,  

Mountain View, CA 94043 USA Terms of Use: http://www.google.com/analytics/terms/de.html , Privacy Policy Overview : http://www.google.com/intl/de/analytics/learn/privacy.html , and Privacy Policy : http://www.google.de/intl/de/policies/privacy . Google is subject to the EU-US Privacy Shield , https://www.privacyshield.gov/EU-US-Framework .  

6 User Defined Facebook Audiences  

(1) The website also uses the remarketing function " Custom Audiences " by Facebook Inc. ("Facebook"). This allows interest-based advertisements ("Facebook Ads ") to be displayed to users of the website when they visit the Facebook social network or visit other websites that also use the procedure. In this way, we aim to show you advertisements that are of interest to you, in order to make our website more interesting for you.  

(2) Through the marketing tools used, your browser automatically establishes a direct connection to the Facebook server. We have no influence on the scope and further use of the data that Facebook collects through the use of this tool and therefore inform you as follows: By integrating Facebook Custom Audiences Facebook receives the information that you have visited the corresponding web page of our website or clicked on one of our ads. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or do not log in, it is possible that the provider will find out and store your IP address and other identifying characteristics.  

(3) Deactivation of the "Facebook Custom Audiences " function is available for logged in users at https://www.facebook.com/settings/?tab=ads#_möglich , as [please add].  

(4) The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f GDPR .  

(5) Third-party information: Facebook Inc , 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php ; Facebook is subject to the EU-US Privacy Shield , https://www.privacyshield.gov/EU-US-Framework . The same applies to Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.  

More information can be found here: http://www.facebook.com/policy.php  

Further information about data processing by Facebook can be found at https://www.facebook.com/about/privacy .  

7 Integration of YouTube videos  

(1) We have integrated YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user is passed on to YouTube if you do not play the videos. Only if you play the videos will the data mentioned under point 2 be passed on. We have no influence on this data transfer. This allows us to show you suitable videos directly on our website and thus make our website more user-friendly. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.  

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data specified in § 3 of this declaration is provided. This is done regardless of whether YouTube provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. This evaluation is carried out in particular (also for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles and must contact YouTube to exercise this right.  

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy . There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy . Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield , https://www.privacyshield.gov/EU-US-Framework .  

8 Newsletter  

(1) With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.  

(2) We use the so-called double opt -in procedure to register you for our newsletter. This means that after your registration we will send you an e-mail to the e-mail address you provided in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your data will be blocked and automatically deleted after one month. In addition, we store the IP addresses you used and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and to clarify any possible misuse of your personal data.  

(3) The only mandatory information for sending the newsletter is your e-mail address. After your confirmation, we will store your e-mail address in order to send you the newsletter. The legal basis is Article 6 para. 1 S. 1 lit. a DS -GVO.  

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link in each newsletter e-mail, by sending an e-mail to info@innovay.nl or by sending a message to the contact details given in the imprint .  

9 Retention period  

Unless we expressly state otherwise, we store personal data for as long as there are legal retention periods. After the expiry of the legal retention periods, we delete the data if we no longer need it to fulfill our contractual obligations to you or if we cannot rely on a legitimate interest to continue to store it.