Privacy

Privacy­policy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can personally identify you. Detailed information on data protection can be found in our privacy policy listed below.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be found in the section “Information on the controller” in this privacy policy.

How do we collect your data?

Some data is collected when you provide it to us, for example by entering it into a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This primarily concerns technical data, such as the Internet browser, operating system or time of page access. This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the transmitted data is also processed for contractual offers, orders or other requests.

What rights do you have regarding your data?

You have the right at any time to obtain free information about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw it at any time with effect for the future. Under certain circumstances, you may request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time with regard to this and other questions concerning data protection.

Analytics tools and third-party tools

Your browsing behaviour may be statistically evaluated when you visit this website, primarily using analytics programs.

Detailed information on these analytics programs can be found in the following privacy policy.

2. Hosting

We host our website’s content with the following provider:

External hosting

This website is hosted externally. Personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

External hosting serves to fulfil contracts with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and our legitimate interest in the secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR). Where consent has been requested, processing is based exclusively on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as consent covers the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Our host(s) will process your data only to the extent necessary to fulfil its/their service obligations and will follow our instructions concerning this data.

We use the following host(s):

Contabo GmbH
Welfenstraße 22
81541 München
Deutschland

Data processing agreement

We have concluded a data processing agreement (DPA) for use of the service named above. This is a contract required by data protection law that ensures that the service processes our website visitors’ personal data only according to our instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

Various personal data is collected when you use this website. Personal data is data that can personally identify you. This privacy policy explains what data we collect and what we use it for, as well as how and for what purpose this takes place.

We point out that data transmission over the Internet, e.g. in communication by e-mail, may have security vulnerabilities. Complete protection against access by third parties is not possible.

Information on the controller

The controller responsible for data processing on this website is:

Sezgin Güven
Reinhold-Schneider-Weg 20
41068 Mönchengladbach

Telefon: [Telefonnummer der verantwortlichen Stelle]
E-Mail: hello@labelmycontent.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or e-mail addresses.

Storage period

Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a justified request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible reasons for storing it, such as tax or commercial retention periods; in that case, deletion will take place after those reasons cease to apply.

General information on the legal bases for data processing on this website

Where you have consented to processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR where special categories of data under Art. 9 para. 1 GDPR are processed. Where explicit consent has been given to transfer personal data to third countries, processing is additionally based on Art. 49 para. 1 lit. a GDPR. Where you have consented to cookies or access to information in your terminal device, e.g. via device fingerprinting, processing is additionally based on § 25 para. 1 TDDDG. Consent may be withdrawn at any time. If your data is required to fulfil a contract or carry out pre-contractual measures, we process it on the basis of Art. 6 para. 1 lit. b GDPR. We also process data where necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Processing may further be based on our legitimate interest under Art. 6 para. 1 lit. f GDPR. The applicable legal bases are explained in the following sections.

Recipients of personal data

In the course of our business activities, we cooperate with various external bodies. This may require personal data to be transferred to them. We disclose personal data only where necessary for contract performance, where legally obliged to do so, where we have a legitimate interest under Art. 6 para. 1 lit. f GDPR, or where another legal basis permits disclosure. When using processors, we disclose customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of consent to data processing

Many processing operations are possible only with your express consent. You may withdraw consent already given at any time. The lawfulness of processing carried out before withdrawal remains unaffected.

Right to object in special cases and to direct advertising (Art. 21 GDPR)

WHERE PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE APPLICABLE LEGAL BASIS CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO PROCESSING FOR SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING CONNECTED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR DATA WILL NO LONGER BE USED for direct advertising (objection under Art. 21 para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged breach. This right exists without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, in a commonly used, machine-readable format, or to have it transmitted to a third party. Direct transmission to another controller will take place only where technically feasible.

Access, rectification and erasure

Within the applicable statutory provisions, you have the right at any time to free access to your stored personal data, its origin and recipients, the purpose of processing and, where applicable, rectification or erasure. You may contact us at any time with regard to this and other questions concerning personal data.

Right to restriction of processing

You have the right to request restriction of processing of your personal data. You may contact us at any time for this purpose. The right exists in the following cases:

• If you dispute the accuracy of your stored personal data, we generally need time to verify it. During verification, you may request restriction of processing.
• If processing was or is unlawful, you may request restriction instead of erasure.
• If we no longer need your data, but you need it to establish, exercise or defend legal claims, you may request restriction instead of erasure.
• If you have objected under Art. 21 para. 1 GDPR, your interests must be balanced against ours. Until it is clear whose interests prevail, you may request restriction.

Where processing has been restricted, data may—apart from storage—be processed only with your consent, to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for important public-interest reasons of the European Union or a Member State.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries sent to us as the site operator. An encrypted connection is indicated by the browser address changing from „http://“ to „https://“ and by the padlock symbol.

When SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

If, after conclusion of a paid contract, you are required to transmit payment data to us, such as an account number for direct debit, this data is needed for payment processing.

Payment transactions using customary payment methods (Visa/MasterCard, direct debit) take place exclusively via an encrypted SSL or TLS connection. An encrypted connection is indicated by the browser address changing from „http://“ to „https://“ and by the padlock symbol.

With encrypted communication, payment data transmitted to us cannot be read by third parties.

4. Data collection on this website

Cookies

Our websites use so-called “cookies”. Cookies are small data packages and do not damage your terminal device. They are stored temporarily for the duration of a session or permanently. Session cookies are automatically deleted after your visit. Permanent cookies remain until you delete them or your browser deletes them automatically.

Cookies may originate from us (first-party cookies) or third-party companies. Third-party cookies enable certain third-party services to be integrated into websites, such as cookies for payment services.

Cookies have various functions. Many are technically necessary because certain website functions would not work without them, such as the shopping basket or video display. Other cookies may be used to evaluate user behaviour or for advertising.

Necessary cookies required for electronic communication, requested functions or website optimisation are stored on the basis of Art. 6 para. 1 lit. f GDPR unless another legal basis is stated. The operator has a legitimate interest in storing necessary cookies for technically faultless and optimised services. Where consent is requested, processing is based exclusively on that consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, permit them only in individual cases, exclude their acceptance in certain cases or generally, and activate automatic deletion when closing the browser. Disabling cookies may restrict this website’s functionality.

If additional cookies and services are used on this website, this privacy policy will inform you.

Enquiries by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your enquiry, including all resulting personal data, will be stored and processed for handling your request. We do not disclose this data without your consent.

Processing is based on Art. 6 para. 1 lit. b GDPR where your enquiry relates to contract fulfilment or pre-contractual measures. In all other cases, it is based on our legitimate interest in effectively handling enquiries (Art. 6 para. 1 lit. f GDPR) or your consent (Art. 6 para. 1 lit. a GDPR), where requested; consent may be withdrawn at any time.

Data sent to us in contact enquiries remains with us until you request deletion, withdraw consent to storage or the purpose ceases to apply. Mandatory statutory provisions, especially retention periods, remain unaffected.

5. Analytics tools and advertising

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

Google Analytics enables the operator to analyse visitor behaviour and receives usage data such as page views, duration of visit, operating systems and user origin. The data is assigned to the user’s terminal device; no assignment to a user ID takes place.

Google Analytics may also record mouse and scrolling movements and clicks. It uses modelling approaches to supplement datasets and machine-learning technologies for analysis.

Google Analytics uses technologies enabling recognition of users for behavioural analysis, such as cookies or device fingerprinting. Information collected by Google is generally transmitted to and stored on a Google server in the USA.

This service is used on the basis of your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Consent may be withdrawn at any time.

Data transmission to the USA is based on the EU Commission’s standard contractual clauses. Details here: https://business.safety.google/adscontrollerterms/sccs/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). Further information: https://www.dataprivacyframework.gov/participant/5780.

IP anonymisation

Google Analytics IP anonymisation is activated. Google shortens your IP address within EU Member States or other EEA Agreement contracting states before transmission to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. Google uses this information on behalf of the operator to evaluate website use, compile activity reports and provide related services. The IP address transmitted by your browser is not merged with other Google data.

Browser plugin

You can prevent collection and processing by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de.

More information on user-data handling in Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de.

Data processing agreement

We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

6. eCommerce and payment providers

Processing customer and contract data

We collect, process and use customer and contract data to establish, define and amend our contractual relationships. We process usage data only insofar as necessary to enable or bill use of the service. The legal basis is Art. 6 para. 1 lit. b GDPR.

Customer data is deleted after completion of the order or termination of the business relationship and expiry of any statutory retention periods. Statutory retention periods remain unaffected.

Data transmission on conclusion of contracts for online shops, retailers and shipping

When you order goods from us, we transfer your personal data to the transport company responsible for delivery and the payment service provider responsible for payment processing. Only data necessary for the respective task is disclosed. The legal basis is Art. 6 para. 1 lit. b GDPR. Where you have consented under Art. 6 para. 1 lit. a GDPR, we transfer your e-mail address to the transport company so it can inform you by e-mail about shipment status; consent may be withdrawn at any time.

Data transmission on conclusion of contracts for services and digital content

We transfer personal data to third parties only where necessary for contract processing, for example to the credit institution commissioned with payment processing.

No further transfer takes place unless you have expressly consented. We do not disclose data to third parties without express consent, for example for advertising.

The basis is Art. 6 para. 1 lit. b GDPR.

Payment services

We integrate third-party payment services. When you make a purchase, the payment service provider processes your payment data, such as name, amount, bank details and credit-card number, for payment processing. The providers’ contractual and privacy provisions apply. Use is based on Art. 6 para. 1 lit. b GDPR and our legitimate interest in smooth, convenient and secure payment processing (Art. 6 para. 1 lit. f GDPR). Where consent is requested, processing is based on Art. 6 para. 1 lit. a GDPR; consent may be withdrawn for the future.

We use the following payment services / providers:

PayPal

Provider: PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”).

Data transmission to the USA is based on the EU Commission’s standard contractual clauses. Details: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay

Provider: Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. Apple’s privacy policy: https://www.apple.com/legal/privacy/de-ww/.

Google Pay

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Google’s privacy policy: https://policies.google.com/privacy.

Stripe

Provider for customers in the EU: Stripe Payments Europe, Ltd.,1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Irland (“Stripe”).

Data transmission to the USA is based on the EU Commission’s standard contractual clauses. Details: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.

Further details: https://stripe.com/de/privacy.

Klarna

Provider: Klarna AB, Sveavägen 46, 111 34 Stockholm, Schweden (“Klarna”). Klarna offers various payment options, such as instalment purchases, and collects personal data when you choose Klarna Checkout. Klarna uses cookies to optimise the service. Details: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

Further details: https://www.klarna.com/de/datenschutz/.

Mastercard

Provider: Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgien (“Mastercard”).

Mastercard may transfer data to its parent company in the USA. The transfer is based on Mastercard’s Binding Corporate Rules. Details: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

Provider: Visa Europe Services Inc., London branch, 1 Sheldon Square, London W2 6TT, Großbritannien (“VISA”).

Großbritannien is considered a safe third country under data-protection law, with a level of protection equivalent to that in the European Union.

VISA may transfer data to its parent company in the USA on the basis of the EU Commission’s standard contractual clauses. Details: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

Further information: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.