Data Privacy Statement
§ 1 Information about the collection of personal data
(1) The following will inform you about the collection of personal data when you use our website. “Personal data” means all data that can be attributed to you personally, such as your name, address, email addresses and user behavior.
(2) The controller for the purposes of Art. 4(7) EU-General Data Protection Regulation (GDPR) is
PULL UP CASE GmbH
Managing Director: Matthias Koch
Dauchinger Str. 34/1
Phone: +49 (0) 7720/9558720
(see our Legal Notice).
(3) If you contact us through email or a contact form, we will store the data you provide us (your email address and possibly your name and telephone number) to answer your questions. We will delete the data accumulated in this context as soon as its storage is no longer necessary or will restrict its processing if statutory retention requirements exist.
(4) If we rely on commissioned service providers for individual service functions, or if we use your data for advertising purposes, we will inform you about the processes in question as noted below. In so doing, we will also specify the established criteria for the storage period.
§ 2 Your rights
(1) You have the following rights in relation to us regarding the personal data which concerns you:
–Right of access,
–Right to rectification or erasure,
–Right to restriction of processing,
–Right to object to the processing,
–Right to data portability.
(2) Moreover, you have the right to lodge a complaint with the data protection supervisory authority about our processing of your personal data.
§ 3 The collection of personal data when you visit our website
(1) If you are using our website only for informational purposes and thus do not register or otherwise transmit information to us, we will collect only the personal data that your browser transmits to our server. If you would like to look at our website, we will collect the following data, which are technically necessary for us to show you our website and guarantee its stability and security (the legal basis is Art. 6(1)(1)(f) GDPR):
–Date and time of the request
–Time zone difference to Greenwich Mean Time (GMT)
–Contents of the request (specific page)
–Access status / HTTP status code
–Data quantity transferred each time
–Website from which the request comes
–Operating system and its interface
–Language and version of the browser software.
(2) In addition to the aforementioned data, cookies will be stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive by the browser you use, and which send certain information to the party who sent the cookies (in this case us). Cookies cannot execute programs or transmit viruses to your computer. They serve only to make the internet services more user-friendly and effective as a whole.
a) This website uses the following types of cookies, whose scope and functionality are explained below:
– Transient cookies (see b)
– Persistent cookies (see c).
b) Transient cookies are deleted automatically when you close your browser. They particularly include session cookies. These store what is known as a “session ID”, with which various requests of your browser can be allocated to the joint session. This lets us recognize your computer whenever you revisit our website. Session cookies are deleted when you log out or close your browser.
c) Persistent cookies are deleted automatically after a specified period, which can differ according to the cookie. You can delete the cookies in your browser’s security settings at any time.
d) You can configure your browser settings accordingly and, for example, reject the acceptance of third-party cookies or all cookies. Please note that if you do reject the acceptance of third-party cookies or all cookies you might not be able to use all of this website’s functions.
e) The Flash cookies used are not recorded through your browser, but through your Flash plug-in. Furthermore, we use HTML5 storage objects, which are placed in your end device. These objects store the necessary data regardless of which browser you use and have no automatic expiration date. To prevent the Flash cookies from being processed, you must install an appropriate add-on, such as the Adobe Flash Killer Cookie for Google Chrome. You can prevent the use of HTML5 storage objects by using your browser’s private mode. We also recommend periodically deleting your cookies and your browser history manually.
§ 4 Additional functions and services of our website
(1) Besides the purely informative use of our website, we offer various services which you can use if interested. To do so, you usually must provide additional personal data which we use to render the service in question and to which the aforementioned principles of data processing apply.
(2) We will sometimes use external service providers to process your data. We have carefully selected and commissioned them. They are bound by our instructions and are supervised periodically.
(3) We may also forward your personal data to third-parties if we offer services in conjunction with partners, such as special offers, sweepstakes, and contracts that have been entered into. You can obtain additional information by providing your personal data or reading the description below the offer.
(4) If our service provider or partner is domiciled in a state outside the European Economic Area (EEA), we will include any circumstance this entails in the offer description.
§ 5 Objection or withdrawal of consent regarding the processing of your data
(1) If you grant consent to the processing of your data, you can withdraw it at any time. From that time forward, it will be deemed impermissible to process your personal data.
(2) You can object to our processing of your personal data if that processing is based on a weighing of interests. This is particularly the case if that processing is not necessary to fulfill a contract with you, which we will present in the following description of the functions. If you make such an objection, we ask that you provide reasons why we should not continue to process your personal data. If you make a justified objection, we will examine the circumstances and either discontinue or adjust the data processing or show you our mandatory and legitimate reasons for why we must continue processing your personal data.
(3) You can object at any time to the processing of your personal data for purposes of advertising and data analysis. You can inform us of your objection to the processing of your personal date for advertising purposes under the following contact data:
PULL UP CASE GmbH
Managing Director: Matthias Koch
Dauchinger Str. 34/1
Phone: +49 (0) 7720/9558720
§ 6 Use of Google Analytics
(2) The IP address that is transmitted from your browser in the context of Google Analytics will not be merged with other data from Google.
(3) You may prevent the storing of cookies by changing your browser settings appropriately, but we must point out that if you do, you may not be able to use all of the features of this website to their full extent. You can also prevent Google from recording and processing the data generated by the cookie which relates to your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the extension “anonymizeIP ()”. This means that IP addresses will be further processed in truncated form, thus ruling out any direct connection to a specific person. If the collected data which concern you gain a personal reference, this will be ruled out immediately and the personal data will be erased with reasonable dispatch.
(5) We use Google Analytics to analyze the use of our website and improve it periodically. We can use the statistics we gain to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data are transmitted to the USA, Google participates in the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6(1)(1)(f) GDPR.
(6) Information concerning the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, Overview of data privacy: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data privacy statement: http://www.google.de/intl/de/policies/privacy.
(7) This website also uses Google Analytics for a cross-device analysis of the influx of visitors, which is performed via a user ID. You can deactivate the cross-device analysis of your usage by going to your customer account under “My Data” > “Personal Data”.
§ 7 Use of the social media plug-in Instagram
(1) We currently set the following social media plug-ins: Instagram. In doing so, we use the “two-click” solution. This means that whenever you visit our site, no personal data are forwarded to Instagram at first. You’ll recognize Instagram by its logo, or by the marking on the tile over its initial letter. We give you the option of using the button to communicate directly with the plug-in’s provider. Instagram will only be informed that you have accessed the respective website for our online services if you click the marked field, thereby activating it. In addition, the data named under § 3 of this declaration will be transmitted. By activating Instagram, personal data from you will be transmitted to Instagram and stored there (if the provider is American, in the USA). Since Instagram collects data especially through cookies, we recommend that you delete all cookies by adjusting your browser’s security settings before clicking on the grayed-out tile.
(2) We have no control over the collected data and data-processing operations, nor are we aware of the full extent of the data collection, the purpose of processing, or the storage periods. We also have no information about the deletion of the data collected through Instagram.
(3) Instagram stores the data collected about you as a user profile and uses that data for purposes of advertisement, market research, or the needs-based design of its website. The data is used that way, in particular (even for users who are not logged in), to present needs-based advertisement and to inform other users of the social network about your activities on our website. You may contact Instagram to object to this user profile being created. We use the plug-in to allow you to interact with social networks and other users, so that we can improve our offerings and make them more interesting for you as a user. The legal basis for using the plug-in is Art. 6 (1)(1)(f) GDPR.
(4) The data will be forwarded regardless of whether you possess an account with Instagram and are logged in there. If you are logged in with Instagram, the data concerning you which we have collected will be assigned directly to your account with Instagram. For example, if you click the activated button and link the page, Instagram will also store this information in your user account and publicly share your contact data. We recommend that you regularly log out after using a social network—but especially before activating the button—since this will allow you to avoid this type of assignment to your profile with the plug-in’s provider.
(5) The following data privacy statement contains additional information about the purpose and scope of the data collection and how the plug-in’s provider will process these data. Here you can also obtain additional information about your rights, and options for adjusting your settings in this regard to protect your privacy.
§ 8 Use of Google Adwords Conversion
(1) We use the services of Google AdWords so we can use promotional materials (Google AdWords) on external websites to draw attention to our attractive offerings. We can determine how successful the individual promotional measures are in relation to the data of our campaigns. This allows us to pursue our objective of showing you ads that will interest you, making our website more appealing, and fairly invoicing advertising costs.
(2) These promotional materials are delivered by Google via “ad servers”. We use ad server cookies to that end, through which certain parameters for success (such as inserting ads or clicks from the user) can be measured. Google Adwords will place a cookie on your computer if you have arrived at our website through a Google ad. Normally, after 30 days these cookies will become ineffective and unable to identify you personally. This cookie will normally store the following information: the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (a marking that the user no longer wishes to be addressed).
(3) These cookies allow Google to recognize your browser. If the user visits certain pages of the websites of AdWords customers and the cookie has not yet expired, Google and the customer can recognize that the user has clicked on the ad and was forwarded to this page. A different cookie is assigned to each AdWords customer. Therefore, cookies cannot be traced via the websites of AdWords customers. We do not collect or process any personal data in the aforementioned advertising campaigns ourselves. We are merely provided with statistical evaluations by Google. We use these evaluations to recognize which of the advertising campaigns we use are especially effective. We receive no further data by using promotional materials; in particular, this information will not help us identify the user.
(4) Based on the marketing tools used, your browser will automatically establish a direct connection with the Google server. We have no influence over the scope and further use of the data which Google collects by using this tool, so we give you the following information based on our state of knowledge: By including AdWords conversion, Google is informed that you have accessed the part of our internet presence in question, or have clicked on an ad by us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google, or are not logged in, the provider might learn your IP address and store it.
(5) You can prevent participation in this tracking procedure in various ways:
a) by setting your browser accordingly; in particular, by suppressing third-party cookies you will no longer receive ads from third-party providers;
b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies;
c) by deactivating the provider’s interest-related ads, which are part of the self-regulatory program “About Ads”, via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies;
d) by permanently deactivating Firefox, Internet Explorer or Google Chrome in your browser, under the link http://www.google.com/settings/ads/plug-in. We must point out that if you do any of these, you might not be able to use all of this service’s functions to their full extent.
§ 9 Facebook Custom Audiences
(1) The website also uses the remarketing function “Custom Audiences” of Facebook Inc. (“Facebook”). This means that whenever users visit the social network Facebook, or other websites which use the procedure, they can be shown interest-related ads (“Facebook ads”). Therefore, we pursue our goal of showing you ads that will interest you, making our website more appealing.
(2) Based on the marketing tools used, your browser will automatically establish a direct connection with the Facebook server. We have no influence over the scope or further use of the data which Facebook collects by using this tool, so we give you the following information based on our state of knowledge: By including Facebook Custom Audiences, Facebook is informed that you have accessed a website belonging to our internet presence, or have clicked on one of our ads. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, the provider might learn and store your IP address or other identifying features.
(3) Logged-in users can deactivate the function “Facebook Custom Audiences” under https://www.facebook.com/settings/?tab=ads#_.
(4) The legal basis for processing your data is Art. 6(1)(1)(f) GDPR. You can learn more about data processing by Facebook under https://www.facebook.com/about/privacy.
§ 10 Use of Google Fonts
(1) Our website uses external fonts by Google Fonts. Google Fonts is a service of Google, Inc. (“Google”). These web fonts are incorporated through a server access, normally a Google server in the USA. This allows the information that you have visited our website to be transmitted to the server. Google will also store the IP addresses from the browsers of end devices belonging to visitors to these internet sites. We use Google Fonts to present our online services in a unified, appealing way. This constitutes a legitimate interest for the purposes of Art. 6(1)(1)(f) GDPR.
(2) For more information, please read Google’s data privacy notice, which you can retrieve here: https://fonts.google.com/#AboutPlace:about, www.google.com/policies/privacy/. Google participates in the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
§ 11 Use of Keen
(2) You can prevent the cookies from being stored by adjusting your browser settings accordingly, but we must point out that if you do, you might not be able to use all of the functions on this website to their full extent. You can also prevent Keen from collecting and processing the data the cookie generates about your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: __________________________________.
(4) We use Keen to analyze the use of our website and to periodically improve it. We can use the statistics we gain to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transmitted to the USA, Keen participates in the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt00000008RErAAM&status=Active. The legal basis for using Keen is Art. 6 (1)(1)(f) GDPR.
(6) Information concerning the third-party provider:
§ 12 Newsletter
(1) By providing your consent, you may subscribe to our newsletter to receive updates on services which may interest you. The advertised goods and services are named in the declaration of consent.
(2) When you register for our newsletter, we use a double opt-in procedure. This means that after you register, we will send you an email, to the address provided, asking you to confirm that you wish to receive the newsletter. If you fail to confirm your registration within 24 hours, your information will be blocked, and after one month will be deleted automatically. Moreover, we will store the IP address you used, and the time of registration and confirmation. The purpose of the procedure is to verify your registration and clear up any misuse of your personal data if necessary.
(3) The only information we need to send the newsletter is your email address. After you confirm, we will store your email address to send the newsletter. The legal basis is Art. 6(1)(1)(a) GDPR.
(4) You may withdraw your consent to have the newsletter sent, thereby unsubscribing to it, at any time. You can declare your withdrawal by clicking on the link provided in each newsletter email, sending an email to firstname.lastname@example.org, or sending a message to the contact data provided in the Legal Notice.
(5) Please note that when we send the newsletter, we will evaluate your user behavior. For this evaluation, the emails sent contain “web beacons” or “tracking pixels”: single-pixel image files which are stored on our website. For the evaluations, we connect the data named under § 3 and the web beacons with your email address and individual ID. And the links in the newsletter contain this ID as well. We use the data so gained to create a user profile to customize the newsletter to your individual interests. This informs us whenever you read our newsletter and lets us know which of its links you click so we can track your personal interests. We connect these data with the actions you perform on our website.
You may object to this tracking at any time by clicking the separate link provided in every email or informing us using another means of contact. The information will be stored as long as you are subscribing to the newsletter. If you deregister, we will store the data only for statistics and in anonymized form. Such tracking is impossible if you have deactivated the display of images as standard in your email program. In this case, the newsletter will not be shown to you in its entirety and you might not be able to use all its functions. If you allow the images to be shown manually, the aforementioned tracking will occur.
(6) Please note that we use the external provider AutopilotHQ to send the newsletter. You can learn more about why and to what extent AutopilotHQ collects and processes data in the following data privacy statement. There you can also obtain additional information about your rights, and options for adjusting your settings in this regard to protect your privacy:
AutopilotHQ, Inc., Finance Department, 140 2nd Street, 5th Floor, San Francisco, California 94105; data privacy statement: https://www.autopilothq.com/legal/privacy-policy.
Autopilot participates in the EU-US Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000TRfOAAW&status=Active
§ 13 Weighing of interests
If, contrary to their claim, the aforementioned tracking software or plug-ins fail to fulfill the European data protection standards regarding lawful processing in accordance with Art. 6 GDPR, the following interests will be weighed:
Data processing is lawful if it is necessary to guard the legitimate interests of the controller or a third-party, unless this need is outweighed by the interests or basic rights and freedoms of the data subject which require that the personal data be protected. The legitimate interests entail legal, factual, economic and immaterial interests.
To purpose of the data processing is to make the website findable and to analyze user behavior.
The tracking software and plug-ins used are suited to attain these objectives.
Necessity is therefore constituted, since they are needed to attain the processing purpose.
They are reasonable, because they are acceptable to the user and do not jeopardize the adequate level of protection.
Last revision: 31 January 2019