1. general

We take the protection of your personal data very seriously. Data is "processed" by us in accordance with the applicable statutory data protection provisions, from 25.05.2018 in particular in accordance with the European Data Protection Regulation (hereinafter referred to as: DSGVO) as well as the country-specific data protection provisions. "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

In the following, we inform you about the processing of your data, in particular about the type, scope and purpose of the collection and use of your personal data when you visit our website and use our offers and services, as well as the corresponding legal basis of the individual processing operations. In addition, we will explain to you within the framework of our data protection declaration which rights you are entitled to with regard to data processing.

"Personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2. the body responsible for data processing

As the provider of our Internet services, we are the data controller. You can reach us at the following contact details: Statement clo GmbH, Brodersenstraße 4, 22041 Hamburg, Germany, Tel: 02253-1859057, Email: [email protected]

3. processing of your data

The type, scope and purposes of the processing of your data differ depending on whether you only visit our website or make use of services and/or benefits offered by us:

a) Visiting our internet pages

When you visit our website, the server stores data in so-called server log files, which your internet browser automatically transmits to the server, in particular:

• Date and time of the retrieval of one of our internet pages
• Your browser type and the respective browser version
• The operating system used
• the last page you visited (so-called referrer URL)
• the amount of data transferred and the access status (file transferred, file not found, etc.) as well as
• Your IP address and the requesting provider.

This data is processed in order to enable the use of the internet pages you have accessed, for statistical purposes, to improve our internet services and for security against illegal cyber attacks, as well as to exercise, assert or defend legal claims. Your IP address will only be stored for as long as is necessary to exercise, assert or defend legal claims, if any, and to defend against possible cyber-attacks and to provide law enforcement authorities with the information necessary for prosecution.

The aforementioned data will be processed separately from all personal data that you provide to us when visiting our website and/or using a service and will not be combined under any circumstances.

This data processing described above has its legal basis in Article 6(1)(b) DSGVO as of 25.05.2018 in order to carry out necessary pre-contractual measures to enable you to use the internet pages you have accessed. Insofar as the aforementioned data is processed for statistical purposes, to improve our Internet offering, for security against unlawful cyber attacks, or in order to exercise, assert or defend legal claims, this will be done on the legal basis of Article 6(1)(f) of the DSGVO as of 25.05.2018. Our legitimate interest for this data processing lies in the evaluation of the data to improve our internet offer, to exercise, assert or defend legal claims, if applicable, and to protect our systems from unlawful cyber attacks and to enable law enforcement authorities to prosecute, if applicable.

b) Processing of personal data when using the services and/or performances offered by us:

Personal data will only be processed by us if this is permitted by law or if you consent to the processing of your personal data.

Insofar as you wish to make use of the services and benefits offered by us on our website, such as ordering goods, providing services, ordering vouchers or newsletters, it is necessary that you provide further personal data for this purpose. We process your personal data for the above purposes from 25.05.2018 on the legal basis of Article 6(1)(b) DSGVO in order to fulfil a contract with you or to carry out necessary pre-contractual measures, which take place at your request. The purpose of processing your personal data is therefore, for example, to process enquiries, to deliver goods ordered by you, to provide the service requested, to process a voucher order or to send you the newsletter you requested or to enable you to use our blog and comment functions. Without the provision of personal data, we cannot conclude the contract with you and provide the services offered.

In addition, we process your data for the purpose of exercising, asserting or defending any legal claims arising from the contractual relationship and, if necessary, to enable law enforcement authorities to prosecute you. As of 25.05.2018, the above data processing is carried out on the legal basis of Article 6(1)(f) DSGVO or, in part, Article 6(1)(c) DSGVO in order to comply with a legal obligation to which we are subject. Our legitimate interest for this data processing is to be able to exercise, assert or defend legal claims arising from the contractual relationship, if applicable, and to enable law enforcement authorities to prosecute criminal proceedings, if applicable.

We also process your personal data for the purpose of complying with our statutory retention obligations. The legal basis for the fulfilment of our legal retention obligations is standardised in Article 6(1)(c) DSGVO as of 25.05.2018.

Your data may be passed on to service providers who support us for the fulfilment of the contract or for the implementation of necessary pre-contractual measures, which are carried out at your request, and which we have of course carefully selected. These may be technical service providers or service providers supporting us in shipping or payment processing or accounting. As of 25.05.2018, the transfer of your personal data to service providers supporting us will take place either on the legal basis of Article 6(1)(b) of the GDPR for the performance of a contract to which the data subject is a party, or for the performance of pre-contractual measures, or on the basis of a proper contract for processing on behalf which meets the requirements of Article 28 of the GDPR.

We also reserve the right to include external content from third-party providers (e.g. You Tube videos, external map services, external graphics, etc.) on our Internet pages.

If you access and use this third-party content on our websites, your IP address will be forwarded to the third-party providers (also from 25.05.2018 on the legal basis of Article 6(1)(b) DSGVO) so that the content accessed by you can be sent from the third-party provider to your browser. The transmission of your IP address to these third-party providers is therefore mandatory in order to send the retrieved content to the browser of your end device. The processing of your data by the third-party content provider is subject to their data protection regulations. Without your express consent, we do not use any third-party tools that use so-called "tracking mechanisms". "Tracking mechanisms" are technologies that make the behaviour of data subjects on the Internet traceable and enable the creation of user profiles.

Your personal data will otherwise only be disclosed to other third parties if we are legally obliged to do so (e.g. to authorities in order to investigate cyber attacks and any criminal offences committed or to tax offices in order to comply with tax obligations or to courts in the event of legal disputes) as of 25.05.2018 on the legal basis of Article 6(1)(c) DSGVO and, where applicable, to lawyers and tax advisors on the legal basis of Article 6(1)(c) DSGVO or Article 6(1)(f) DSGVO. Our legitimate interest in disclosing your data to lawyers is to exercise, assert or defend legal claims. Our legitimate interest in disclosing your data to external tax advisors is to be able to properly comply with our tax obligations.

The mandatory data required by us can be seen from the input mask within the scope of the registration or ordering process. You may voluntarily provide additional information that is not required for the above purposes; we mark this information accordingly when collecting the data during the registration or ordering process.

Furthermore, we do not pass on your personal data to third parties without your express consent.

The mandatory data required by us can be seen from the input mask within the scope of the registration or ordering process. You may voluntarily provide additional information that is not required for the purposes described above; this information is marked accordingly when we collect the data as part of the registration or ordering process.

4. use of cookies

We use so-called "cookies" on our website. Cookies are small text files that are sent to your browser by our web server when you visit our website and are stored by the browser on your device (e.g. PC, smartphone, tablet) for a limited period of time for various purposes. Below we inform you about the use of cookies on our website:

For the full range of functions of our website, it may be necessary for technical reasons to allow the use of cookies so that your device can continue to be identified during a visit to our website when switching from one of our websites to another (so-called "session cookies").

In addition, we reserve the right to use so-called "permanent cookies" so that you can use our website more effectively. Permanent cookies enable us to recognise your device when you visit our website again and to store information about your last visit (e.g. your preferred language or other settings). We only use permanent cookies, which are automatically deleted after 12 months at the latest.

The aforementioned cookies may also be used by third-party providers of tools that we use on our website, in particular for statistical and analytical purposes. We will only use third-party tools with privacy-friendly settings. Accordingly, without your prior express consent, we will not use so-called "targeting cookies" on our website, which make the behaviour of data subjects on the Internet traceable and enable the creation of user profiles. If we use tools from third-party providers, we will inform you about the use, the mode of operation and further details of the respective tools under point 15 of this data protection declaration.

The use of the cookies described above takes place from 25.05.2018 on the legal basis of Article 6(1)(f) DSGVO. Our legitimate interest in the use of these cookies is to enable our customers and the users of our website to use our services more effectively and to analyse and improve our website.

You can determine yourself whether cookies can be set and retrieved through the settings in your browser. For example, you can deactivate the storage of cookies altogether in your browser, limit it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks for your permission. In addition, you can set your browser so that cookies are automatically deleted when you close the browser. Finally, you may be able to activate a Do-Not-Track ("DNT") function in your browser so that you are automatically not collected by any web analytics tool that may be used. Information on how to configure your browser settings can be found in the help function of your respective internet browser.

5. storage and deletion periods for personal data

If the processing purpose for your personal data required in each case ceases to apply, your personal data processed by us will be routinely deleted or blocked, unless you have consented to a permanent storage of your personal data.

If individual data must be retained after the processing purposes have ceased to apply due to statutory retention periods (e.g. retention requirements under tax and commercial law), the deletion shall be replaced by the blocking of the data. The data to be retained may then be processed exclusively for the aforementioned purposes on the legal basis of Article 6(1)(c) DSGVO.

6. your rights as a data subject of the data processing

You have the rights described below at any time:

• Right of confirmation and access to personal data processed by us pursuant to Article 15 of the GDPR
• Right to rectify your personal data in accordance with Article 16 of the GDPR
• Right to erasure of your personal data ("right to be forgotten") pursuant to Article 17 DSGVO
• Right to restrict the processing of your personal data pursuant to Article 18 DSGVO
• Right to data portability of your personal data pursuant to Article 20 DSGVO
• In accordance with Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Please send us your request to the contact details provided in section 2 of this privacy policy.

8. right of revocation for consents

You may revoke any consent expressly given to us under data protection law at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

9. complaining about data protection violations to the supervisory authorities

If you are of the opinion that your data protection rights are being violated, you can contact the supervisory authority of your federal state or the federal state of our registered office. If a complaint concerns a company that has its registered office in another federal state, the supervisory authority will forward the complaint to the supervisory authority responsible there.

The supervisory authority of our registered office is as follows:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str 22
20459 Hamburg

Phone: +49 (0) 40/428 54 - 4040
Fax: +49 (0) 40/4279 - 11 811
E-mail: [email protected]

10. obligation to notify in connection with the rectification or erasure of personal data or the restriction of processing

We will notify all recipients to whom personal data has been disclosed of any rectification or erasure of the personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18 of the GDPR, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request this.

11. legal or contractual requirements to provide the personal data as well as information on the necessity for the conclusion of the contract as well as on the obligation of the data subject to provide the personal data and possible consequences of not providing it:

As described above, we collect and process your personal data in particular for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures which are carried out at the request of the data subject. The provision of personal data is therefore contractually required for this purpose. In some cases, the provision of personal data when concluding contracts (e.g. for invoices) is also required by law due to tax and/or commercial regulations. If you do not provide us with personal data, this will mean that we will not be able to conclude a contract with you and/or answer your enquiries.
Insofar as we process your personal data on the basis of a legitimate interest pursuant to Art. 6(1)(f) of the GDPR, the provision of your data for these purposes is neither contractually nor legally required. The details of data processing on the basis of legitimate interest can be found in the above information in the respective places. If you do not provide us with personal data for these purposes, this may mean that you cannot use our website or cannot use it to its full extent.

12. automated decisions in individual cases including profiling

We do not use automated decision-making - including profiling in accordance with Article 22(1) and (4) of the GDPR.

13. data security

We use technical and organisational security measures to protect the processing of personal data, in particular against accidental or intentional manipulation, loss, destruction or against attack by unauthorised persons. Our security measures are continuously improved in line with technological developments.

14. questions / comments

If you have any questions or comments about this privacy statement or about data protection in general, please contact us using the contact details provided in section 2 of this privacy statement.

15 Use of third-party tools and content

If we use third-party tools (programs) and content on our website that use persistent cookies for statistical or analytical purposes and/or process your IP address and/or other personal data, you will find information below about these tools and content and how they work:

Notes on Google Analytics:

It is important to us to design our internet pages as optimally as possible and thus make them attractive for our visitors. To do this, it is necessary for us to know which parts of our website are well received by our visitors.

For this purpose, we use the web analytics service Google Analytics on our website, a web analytics service provided by Google Inc. ("Google"), on our website. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. We use Google Analytics on this website with IP anonymisation activated, i.e. your IP address is truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by configuring your browser software accordingly. Information on how to configure your browser settings can be found in the help function of your respective internet browser. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

In addition, you can prevent the collection of data by using a browser plugin. This plugin sets an opt-out cookie and thus prevents the future collection and processing of your data by Google Analytics. You can download and install a browser plugin under the link http://tools.google.com/dlpage/gaoptout?hl=de .

You can also prevent the collection by Google Analytics by clicking on the following link to "Deactivate Google Analytics". An opt-out cookie will be set that prevents future collection of your data when visiting this website: Deactivate Google Analytics.

For more information about Google's terms of use and privacy policy, please visit http://www.google.com/analytics/terms/de.html or http://www.google.de/intl/de/policies/terms/regional.html.

Status of the data protection declaration: 20.10.2020