1. General

We take the protection of your personal data very seriously. We process data in accordance with the applicable statutory data protection regulations, from May 25, 2018 in particular in accordance with the European General Data Protection Regulation (hereinafter referred to as GDPR) and the country-specific data protection regulations. "Processing" is any operation or series of operations carried out with or without the aid of automated procedures in connection with personal data, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of provision, comparison or linking, restriction, erasure or destruction;

Below we will inform you about the processing of your data, in particular about the type, scope and purposes of the collection and use of your personal data when you visit our website and use our offers and services, as well as the corresponding legal basis for the individual processing operations. In addition, we explain to you in our data protection declaration which rights you are entitled to with regard to data processing.

“Personal data” means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. Responsible body for data processing

As the provider of our Internet services, we are responsible for data processing. You can contact us at the following Contact details: Statement clo GmbH, Brodersenstraße 4, 22041 Hamburg, Germany, Tel: 02253-1859057, Email: info@statement-clo.de

3. Processing of your data

The type, scope and purposes of the processing of your data differ depending on whether you only visit our website or use the services and/or benefits offered by us:

a) Visiting our websites

When you visit our website, the server stores data in so-called server log files that your Internet browser automatically transmits to the server, in particular:

• Date and time of access to one of our websites
• Your browser type and version
• the operating system used
• the last page you visited (so-called referrer URL)
• the amount of data transferred and the access status (file transferred, file not found, etc.) and
• Your IP address and the requesting provider.

This data is processed in order to enable the use of the websites you have accessed, for statistical purposes, to improve our internet offering and to ensure security against illegal cyber attacks, as well as to exercise, assert or defend legal claims. Your IP address will only be stored for as long as is necessary to exercise, assert or defend legal claims, if necessary, and to defend against possible cyber attacks and to provide law enforcement authorities with the information necessary for criminal prosecution.

The data provided above will be processed separately from all personal data that you provide to us when visiting our website and/or using a service and will under no circumstances be merged.

As of May 25, 2018, the legal basis for this data processing described above is Article 6, Paragraph 1, Letter b) of the GDPR to carry out the necessary pre-contractual measures to enable you to use the websites you have accessed. As of May 25, 2018, if the above data is processed for statistical purposes, to improve our website, to ensure security against illegal cyber attacks, or to exercise, assert or defend legal claims, this will be done on the legal basis of Article 6, Paragraph 1, Letter f) of the GDPR. Our legitimate interest in this data processing lies in evaluating the data to improve our website, to exercise, assert or defend legal claims if necessary, and to protect our systems against illegal cyber attacks and, if necessary, to enable law enforcement authorities to prosecute criminal offenses.

b) Processing of personal data when using the services and/or benefits we offer:

We will only process personal data if this is permitted by law or if you consent to the processing of your personal data.

If you wish to use the services offered by us on our website, such as ordering goods, providing services, ordering vouchers or newsletters, you will need to provide further personal data. We will process your personal data for the above purposes from May 25, 2018 on the legal basis of Article 6 Paragraph 1 Letter b) GDPR in order to fulfill a contract with you or to carry out necessary pre-contractual measures which are carried out at your request. The purpose of processing your personal data is therefore, for example, to process inquiries, deliver goods you have ordered, provide the requested service, process a voucher order or send you the newsletter you have requested or enable you to use our blog and comment functions. Without the provision of personal data, we cannot conclude the contract with you and cannot provide the services offered.

In addition, we process your data for the purpose of being able to exercise, assert or defend legal claims arising from the contractual relationship and, if necessary, to enable the law enforcement authorities to prosecute. The above data processing will take place from May 25, 2018 on the legal basis of Art. 6 Paragraph 1 Letter f) GDPR or partly on Article 6 Paragraph 1 Letter c) GDPR in order to comply with a legal obligation to which we are subject. Our legitimate interest in this data processing lies in being able to exercise, assert or defend legal claims arising from the contractual relationship and, if necessary, to enable the law enforcement authorities to prosecute.

We also process your personal data for the purpose of complying with our statutory retention obligations. The legal basis for fulfilling our statutory retention obligations is set out in Article 6 paragraph 1 letter c) of the GDPR as of May 25, 2018.

Your data will be passed on to service providers who support us in order to fulfil the contract or to carry out necessary pre-contractual measures that are carried out at your request. We have of course carefully selected these service providers. These may be technical service providers or service providers who support us with shipping or payment processing or accounting. From May 25, 2018, your personal data will be passed on to service providers who support us either on the legal basis of Article 6 paragraph 1 b) GDPR to fulfil a contract to which the data subject is a party, or to carry out pre-contractual measures or on the basis of a proper contract for processing on behalf of us, which meets the requirements of Article 28 GDPR.

We also reserve the right to integrate external content from third parties (e.g. YouTube videos, external map services, external graphics, etc.) on our website.

If you access and use this third-party content on our website, your IP address will be forwarded to the third-party provider (also from May 25, 2018 on the legal basis of Article 6 Paragraph 1 Letter b) GDPR) so that the content you access can be sent from the third-party provider to your browser. The transmission of your IP address to these third-party providers is therefore mandatory in order to send the accessed content to the browser of your device. The processing of your data by the provider of the third-party content is subject to their data protection regulations. Without your express consent, we do not use any third-party tools that use so-called "tracking mechanisms". "Tracking mechanisms" are technologies that make the behavior of data subjects on the Internet traceable and enable the creation of user profiles.

Otherwise, your personal data will only be passed on to other third parties if we are legally obliged to do so (e.g. to authorities to investigate cyber attacks and any criminal offenses committed, to tax offices to comply with tax obligations or to courts in the event of legal disputes) from May 25, 2018 on the legal basis of Article 6 Paragraph 1 Letter c) GDPR and, if applicable, to lawyers and tax advisors on the legal basis of Article 6 Paragraph 1 Letter c) GDPR or Article 6 Paragraph 1 Letter f) GDPR. Our legitimate interest in passing on your data to lawyers lies in exercising, asserting or defending legal claims. Our legitimate interest in passing on your data to external tax advisors lies in being able to properly fulfill our tax obligations.

The data that we absolutely need can be seen in the input mask during the registration or ordering process. You can provide additional information that is not absolutely necessary for the above purposes on a voluntary basis; we will mark it accordingly when we collect the data during the registration or ordering process.

Furthermore, we will not pass on your personal data to third parties without your express consent.

The data that we absolutely need can be seen in the input mask during the registration or ordering process. You can provide additional information that is not absolutely necessary for the purposes described above on a voluntary basis; we will mark it accordingly when we collect the data during the registration or ordering process.

4. Use of cookies

We use so-called "cookies" on our website. Cookies are small text files that are sent from our web server to your browser when you visit our website and are stored temporarily on your device (e.g. PC, smartphone, tablet) for various purposes. Below we will inform you about the use of cookies on our website:

For technical reasons, it may be necessary to allow the use of cookies to ensure the full functionality of our website so that your device can continue to be identified when you visit our website and switch from one of our websites to another (so-called “session cookies”).

In addition, we reserve the right to use so-called "permanent cookies" so that you can use our website more effectively. Persistent cookies enable us to recognize your device when you visit our website again and to save information about your last visit (e.g. your preferred language or other settings). We only use permanent cookies, which are automatically deleted after 12 months at the latest.

The cookies named above may also be used by third-party providers of tools that we use on our website, in particular for statistical and analytical purposes. We will only use third-party tools with data protection-friendly settings. Without your prior express consent, we will therefore not use so-called "targeting cookies" on our website, which make the behavior of data subjects on the Internet traceable and enable the creation of user profiles. If we use third-party tools, we will inform you about the use, how they work and further details of the respective tools under point 15 of this data protection declaration.

The use of the cookies described above will take place from May 25, 2018 on the legal basis of Article 6 paragraph 1 letter f) GDPR. Our legitimate interest in using these cookies is to enable our customers and users of our website to use our services more effectively and to analyze and improve our website.

You can determine whether cookies can be set and accessed yourself using the settings in your browser. For example, you can deactivate the storage of cookies altogether in your browser, restrict it to certain websites, or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for permission. You can also set your browser so that cookies are automatically deleted when you close the browser. Finally, you can activate a Do-Not-Track ("DNT") function in your browser so that you are not automatically recorded by any web analysis tool that may be used. Information about configuring your browser settings can be found in the help function of your respective Internet browser.

5. Storage and deletion periods for personal data

If the purpose of processing your personal data no longer applies, your personal data processed by us will be routinely deleted or blocked unless you have consented to the permanent storage of your personal data.

If individual data must be retained after the processing purposes no longer apply due to statutory retention periods (e.g. retention requirements under tax and commercial law), the data will be blocked instead of deleted. The data to be retained may then be processed exclusively for the aforementioned purposes on the legal basis of Article 6 paragraph 1 letter c) GDPR.

6. Your rights as a data subject

You have the rights described below at any time:

• Right to confirmation and information about the personal data we process in accordance with Article 15 GDPR
• Right to rectification of your personal data in accordance with Article 16 GDPR
• Right to erasure of your personal data ("right to be forgotten") in accordance with Article 17 GDPR
• Right to restrict the processing of your personal data in accordance with Article 18 GDPR
• Right to data portability of your personal data in accordance with Article 20 GDPR
• According to Article 22 GDPR, you have the right not to be subjected to a decision based solely on automated processing – including profiling – that produces legal effects concerning you or similarly significantly affects you.

Please send us your request to the contact details provided under section 2 of this privacy policy.

8. Right of revocation for consent

You can revoke any consent you have expressly given us regarding data protection at any time with effect for the future. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

9. Complaints about data protection violations to the supervisory authorities

If you believe that your data protection rights have been violated, you can contact the supervisory authority in your federal state or in the state in which our company is based. If a complaint concerns a company that is based in another federal state, the supervisory authority will forward the complaint to the supervisory authority responsible there.

The supervisory authority of our company headquarters is as follows:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str 22
20459 Hamburg

Telephone: +49 (0) 40/428 54 - 4040
Fax: +49 (0) 40/4279 - 11 811
Email: mailbox@datenschutz.hamburg.de

10. Obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing

We will inform all recipients to whom personal data was disclosed of any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17 Paragraph 1 and Article 18 GDPR, unless doing so should prove impossible or involve disproportionate expenditure. We will also inform you about these recipients if you request this.

11. Legal or contractual provisions for the provision of personal data as well as information on the necessity for the conclusion of the contract as well as on the obligation of the data subject to provide the personal data and possible consequences of non-provision:

As already described, we collect and process your personal data in particular for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures at the request of the data subject. The provision of personal data is therefore contractually required for this purpose. In some cases, the provision of personal data when concluding contracts (e.g. for invoices) is also required by law due to tax and/or commercial law regulations. If you do not provide us with personal data, this means that we cannot conclude a contract with you and/or answer your inquiries.
Insofar as we process your personal data on the basis of a legitimate interest in accordance with Art. 6 Paragraph 1 Letter f) of the GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of a legitimate interest can be found in the above information at the respective points. If you do not provide us with personal data for these purposes, this may mean that you cannot use our website or cannot use it to its full extent.

12. Automated decisions in individual cases, including profiling

We do not use automated decision-making – including profiling in accordance with Article 22 paragraphs 1 and 4 of the GDPR.

13. Data security

We use technical and organizational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.

14. Questions / Comments

If you have any questions or comments regarding this privacy policy or data protection in general, please feel free to contact us using the contact details provided in section 2 of this privacy policy.

15. Use of third-party tools and content

If we use third-party tools (programs) and content on our website that use permanent cookies for statistical or analytical purposes and/or process your IP address and/or other personal data, you will find information about these tools and content and how they work below:

Notes on Google Analytics:

It is important to us to design our websites as optimally as possible and thus make them attractive to our visitors. To do this, we need to know which parts of our website appeal to our visitors.

For this purpose we use the web analysis service Google Analytics, a web analysis service of Google Inc. ("Google"), on our website. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. We use Google Analytics on this website with activated IP anonymization, i.e. your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent cookies from being saved by setting your browser software accordingly. Information about configuring your browser settings can be found in the help function of your respective Internet browser. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

In addition, you can prevent the collection of data using a browser plug-in. This plug-in sets an opt-out cookie and thus prevents the future collection and processing of your data by Google Analytics. You can download a browser plug-in using the link http://tools.google.com/dlpage/gaoptout?hl=de download and install.

You can also prevent Google Analytics from collecting data by clicking on the following link to "Deactivate Google Analytics". An opt-out cookie will be set that prevents future collection of your data when you visit this website: Deactivate Google Analytics.

Further information about Google's terms of use and privacy policy can be found at http://www.google.com/analytics/terms/de.html or at http://www.google.de/intl/de/policies/terms/regional.html .

Status of the privacy policy: 20.10.2020