Privacy Policy

Personal data (hereinafter referred to as “data”) is processed by us only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations carried out with or without the aid of automated processes in connection with personal data. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy we inform you in particular about the type, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we alone or jointly with others decide on the purposes and means of processing. We also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

Our privacy policy is structured as follows:
I. Information about us as the controller
II. Rights of users and data subjects
III. Information on data processing

—

I. Information about us as the controller

The responsible provider of this website within the meaning of data protection law is:

Ceresal GmbH
Stefanie Strebel
Joseph-Meyer-Straße 13-15
68167 Mannheim, Germany

Phone: +49 621 30978928
Fax: +49 621 30978944
E-Mail: info@ceresal.de

No Data Protection Officer has been appointed, as there is no legal obligation to do so.

—

II. Rights of users and data subjects

With regard to the data processing described below, users and data subjects have the right:

– to confirmation of whether data concerning them is being processed, to information about the processed data, to further details about the data processing, and to copies of the data (cf. Art. 15 GDPR);
– to rectification or completion of inaccurate or incomplete data (cf. Art. 16 GDPR);
– to immediate erasure of the data concerning them (cf. Art. 17 GDPR), or alternatively, if further processing is required under Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR;
– to receive the data concerning them and provided by them and to transmit this data to other providers/controllers (cf. Art. 20 GDPR);
– to lodge a complaint with the supervisory authority if they believe that the processing of their data by the provider is in violation of data protection regulations (cf. Art. 77 GDPR).

Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any rectification or erasure of data or restriction of processing, which is carried out in accordance with Articles 16, 17 (1), 18 GDPR. This obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the future processing of their data, provided that the data is processed by the provider pursuant to Art. 6 (1) lit. f) GDPR. In particular, an objection to data processing for direct marketing purposes is permitted.

—

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, provided that deletion does not conflict with statutory retention obligations and no other information is provided on individual processing procedures below.

—

Cookie Manager

To obtain consent for the use of technically non-essential cookies on the website, the provider uses a cookie manager.

When the website is accessed, a cookie with the settings information is stored on the user’s device so that the query regarding consent does not need to be made again on subsequent visits.

This cookie is required to obtain the user’s legally valid consent.

Users can prevent or end the installation of cookies via their browser settings.

—

Cookies

a) Session Cookies

We use so-called session cookies with our website. Cookies are small text files or other storage technologies that are placed and stored on your device by the internet browser you use. These cookies process certain information from you, such as your browser or location data or your IP address, on an individual basis.

Through this processing, our website becomes more user-friendly, effective, and secure, as processing enables, for example, the display of our website in different languages or the offering of a shopping cart function.

The legal basis for this processing is Art. 6 (1) lit. b) GDPR, insofar as these cookies are used to process data for contract initiation or contract execution.

If the processing does not serve contract initiation or contract execution, our legitimate interest lies in improving the functionality of our website. In this case, the legal basis is Art. 6 (1) lit. f) GDPR.

When you close your internet browser, these session cookies are deleted.

b) Third-Party Cookies

It is possible that cookies from partner companies with which we cooperate for the purposes of advertising, analysis, or functionalities of our website may also be used.

Details of this, in particular the purposes and legal basis of the processing of such third-party cookies, can be found in the following information.

c) Removal option

You can prevent or restrict the installation of cookies through the settings of your internet browser. You can also delete stored cookies at any time. The steps and measures required for this depend on the specific internet browser you are using. Please use the help function or documentation of your browser or contact its manufacturer or support.

In the case of Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The necessary steps and measures also depend on the Flash player you are using. Please use the help function or documentation of your Flash player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be fully used.

—

Contact requests / Contact option

If you contact us via the contact form or by e-mail, the data you provide will be used to process your request. The provision of the data is necessary in order to process and respond to your request – without providing it, we may not be able to process your request or only to a limited extent.

The legal basis for this processing is Art. 6 (1) lit. b) GDPR.

Your data will be deleted once your inquiry has been conclusively answered and provided that there are no legal obligations to retain data, such as in the event of subsequent contract processing.

—

Google Analytics

We use Google Analytics on our website, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”).

Google Analytics helps us analyze the use of the website and measure the effectiveness of our marketing campaigns. The legal basis is Art. 6 (1) lit. a GDPR. The user can revoke consent to the use of Google Analytics at any time pursuant to Art. 7 (3) GDPR via the “Cookie Settings” on our website, with effect for the future.

Information such as time, location, and frequency of website visits, as well as interactions with the website (e.g. click paths, ads viewed/clicked, clicks on links), including the user’s IP address, are transmitted to a Google server in the USA and stored there for a maximum of 2 months.

Google LLC is part of the “Data Privacy Framework”, for which the EU Commission has issued an adequacy decision pursuant to Art. 45 GDPR:
https://www.dataprivacyframework.gov/list

Google also collects “demographic characteristics” and may generate statistics that provide information on the age, gender, and interests of site visitors. This is done through automated analysis of advertising and third-party information.

If the user has enabled personalized ads in their Google account and consents to Google Analytics, Google may analyze usage behavior across devices – i.e. across all devices linked to the user’s Google account. Google creates models for cross-device conversions; only anonymous statistics are transmitted to us, no personal data.

If the user wishes to deactivate this cross-device analysis, they can disable the “Personalized advertising” function in their Google account settings under the following link:
https://support.google.com/ads/answer/2662922?hl=en

We use Google Analytics with an anonymization function. This means that the IP address of the user is shortened by Google within EU member states or in other states party to the Agreement on the European Economic Area.

Google uses the collected data to evaluate the use of our website by the user, to compile reports on website activities for us, and to provide further services related to the use of the website and the internet. Google may also pass this information on to third parties if required by law or if third parties process this data on behalf of Google.

According to its own statements, Google will not associate the user’s IP address with other data from Google in any case. Further information and options for preventing the use of data are offered by Google here:
https://www.google.com/intl/en/policies/privacy/partners

If the user does not agree to data collection, they can also prevent it by installing the browser add-on for deactivating Google Analytics once:
https://tools.google.com/dlpage/gaoptout

—

Google Tag Manager

We use Google Tag Manager on our website. This product is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as “Google”).

Google Tag Manager is used solely to integrate certain functions into our website and to enable the management of these functions via an interface provided by Google.

When the website is accessed, the corresponding functions are loaded from a Google server, which may also be located in the USA. The user’s IP address is processed in order to provide the functions.

The functions used are listed exhaustively in our privacy policy. Any consents not granted by the user for certain functions are also observed when using Google Tag Manager.

Google LLC is also part of the “Data Privacy Framework”:
https://www.dataprivacyframework.gov/list

The legal basis for the use is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the optimization and efficient operation of our website.

—

Google Fonts

We use Google Fonts on our website to display external fonts. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the optimization and efficient operation of our website.

Through the connection to Google established when our website is accessed, Google can determine from which website your request was sent and to which IP address the display of the font should be transmitted.

Google provides further information, particularly on the options for preventing the use of data, here:
https://adssettings.google.com/authenticated
https://policies.google.com/privacy

—

Google reCAPTCHA

We use Google reCAPTCHA on our website to check and prevent interactions on our website through automated access, e.g. by bots. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

Through this service, Google can determine from which website a request is sent and from which IP address you are using the reCAPTCHA input box. In addition to your IP address, further information may be collected by Google that is necessary for the provision and guarantee of this service.

The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the security of our website and in the prevention of unwanted, automated access in the form of spam or similar.

Google provides further information on the general handling of user data here:
https://policies.google.com/privacy