Privacy
Privacy Policy
Controller:
mypado GmbH
Zinkhüttenweg 17
44143 Dortmund
Tel.: +49 (0) 231 56 55 96 60
Fax: +49 (0) 231 56 55 96 62
E-mail: info@mypado.de
1.) Processing of personal data
Within the scope of this website, we process your personal data, among other things, as follows (for further data processing carried out in connection with the website, please refer to the following sections of this privacy policy):
Log files when visiting the website
When you use our website, our hosting provider logs so-called “log file” data upon each access to the servers, such as the name of the website accessed, the previously visited page (“referrer” URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.
The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest in storing log file data lies in ensuring system security, including investigating misuse. Log file data is deleted or anonymized after no more than 30 days, unless it is required for a longer period due to a security-relevant incident, e.g., for investigation or evidentiary purposes.
Contacting us:
When you contact us, we process your personal data such as name, address, e-mail address, telephone number or similar data that we need to respond to your inquiry.
The legal basis for processing your personal data in connection with contact inquiries is Article 6(1)(b) GDPR where your request aims at concluding a contract; otherwise Article 6(1)(f) GDPR, whereby our legitimate interest lies in responding to inquiries.
In connection with contact inquiries, we store your personal data for as long as necessary to process your request or with regard to statutory retention obligations.
Registration/Orders:
When you register or place orders, we process your personal data such as name, address, e-mail address, telephone number, date of birth, user name of your choice, payment data, etc., which we require to fulfill the contractual relationship with you or to carry out pre-contractual measures taken at your request.
We store the personal data collected in the course of registration or orders for as long as necessary to fulfill the contractual relationship (possibly including provision of the customer account) and/or to carry out pre-contractual measures at your request and/or with regard to warranty, guarantee or comparable obligations and/or with regard to statutory retention periods.
The legal basis for processing your personal data collected in the course of registration or orders is Article 6(1)(b) GDPR (“performance of a contract”).
Providing this personal data is not legally or contractually required. However, it is necessary for concluding the contract, i.e., for carrying out the registration or order, insofar as the relevant information is mandatory (rather than optional) in our registration/order process.
Newsletter:
If you subscribe to our newsletter, we process the data collected for this purpose, such as your e-mail address, salutation, etc., for the purpose of sending the newsletter.
Where processing for the above purposes is based on your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, processing is carried out on the basis of Article 6(1)(f) GDPR (“legitimate interests”), whereby the legitimate interests lie in the purposes mentioned above.
We store the personal data required for sending the newsletter for as long as we need it for this purpose or until you withdraw your consent to receive the newsletter. Any legitimate continued storage for other purposes (e.g., customer communications) remains unaffected.
2.) Cookies
Cookies are small text files stored on the user’s computer that enable analysis of how the website is used by the user.
Cookies can be used, for example, to make the use of the website easier and more convenient for visitors or to enable certain functions in the first place, or, for example, to analyze visitor flows.
Where personal data is also processed by individual cookies used by us, processing takes place pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR in the case of consent given, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in the economical operation of our online offering as well as a user-friendly and effective design of the site visit.
The storage period of cookies may be limited to the duration of the respective browser session, i.e., the cookies are deleted after the browser is closed (temporary cookies); or the storage period may go beyond this in order to recognize the user upon the next visit and then, for example, display preferred content (persistent cookies). Unless we state otherwise in this privacy policy or in our cookie management services or other separate information on cookies, you should assume that cookies are persistent and the storage period is up to two years.
You can withdraw consent given for the setting of cookies at any time or object to data processing by cookies by deleting the cookies in your browser settings.
You can also set your browser so that cookies are only stored with your consent.
A way to withdraw, object and/or manage your cookies can be found here:
With regard to advertising cookies, you can block and/or manage many of them via the following services:
However, if you refuse cookies, you may not be able to use certain website functions, services, applications or tools.
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp
However, if you refuse cookies, you may not be able to use certain website functions, services, applications or tools.
3.) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable analysis of your use of the website.
Google may transfer your data to servers worldwide. Transfers of data to the USA are based by Google on the EU-US Data Privacy Framework. Transfers to countries without an adequate level of data protection are based by Google on the EU Standard Contractual Clauses. Details can be found in the following section of Google’s privacy policy:
https://policies.google.com/privacy/frameworks
You can find Google’s privacy policy at: https://policies.google.com/privacy
Data processed in connection with the use of Google Analytics is automatically deleted after a maximum of 26 months.
Where processing for the above purposes is based on your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, processing is carried out on the basis of Article 6(1)(f) GDPR (“legitimate interests”), whereby the legitimate interests lie in the purposes mentioned above.
You can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available via the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
4.) Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website.
Google Tag Manager is a tool from Google for integrating, managing and further using Google services and third-party services on our website for analytics, site optimization and/or advertising purposes. These services are integrated into our website via tags (i.e., additional code inserted into the source code of our website).
The Tag Manager itself (which implements the tags) does not, according to Google, access the data collected via the tags.
More detailed information on data processing can be found on Google’s pages:
https://www.google.com/intl/de/tagmanager/faq.html
https://www.google.com/intl/de/tagmanager/use-policy.html
https://policies.google.com/privacy?hl=de&gl=de
You can object to collection via Google Tag Manager at any time. See letter d. in the “Cookies” section of this privacy policy.
5.) Presence on Facebook
We operate a presence on the social network Facebook.
Your personal data is processed by us and, above all, by Facebook. Below we describe which data about you we process on our Facebook page and our relationship to Facebook in this context.
a) Which personal data do we process when you use our Facebook page?
When you use our Facebook page, we process the following personal data:
a. Communication
We operate our presence on Facebook to present our goods and/or services and to communicate with customers and prospects.
The legal basis for our processing of the relevant communications with you is Article 6(1)(f) GDPR (“legitimate interests”), whereby our legitimate interests lie in the purposes mentioned above. For orders placed via our presences on social networks, the legal basis is also Article 6(1)(b) GDPR (“performance of a contract”).
b. Technical usage data
When you use our Facebook page, we process technical information about your visit to our page, such as the IP address of your device, the time of your visit and the website from which you visit us. We process this data for technical administration and provision of the Facebook page and to obtain, as the operator of the page, statistical information about the use of our Facebook page.
The legal basis for processing your data is Article 6(1)(f) GDPR. Our interest lies in continuously improving our Facebook page and providing you with information that is interesting and relevant to you.
c. Statistical usage data
We also collect statistical usage data. This includes, for example, information about viewing pages, posts or videos, subscriptions, likes of posts, recommendations of posts or comments, sharing content, reactions or comments to posts, reporting posts, clicks on links on other pages leading to the fan page, mouse movements over names or profile pictures to obtain a preview of content, clicks on buttons on a fan page and the device (computer or mobile device) with which you are logged in.
We receive such “usage data” only in aggregated form via the Facebook “Page Insights” tool (https://www.facebook.com/business/a/page/page-insights and https://de-de.facebook.com/legal/terms/information_about_page_insights_data) (“Insights data”). We cannot assign Insights data to you personally.
We process this data for the technical administration and provision of our Facebook page and to obtain, as the operator of the page, statistical information about the use of our fan page. The legal basis for processing this data is Article 6(1)(f) GDPR. Our interest here is the administration and improvement of the Facebook page.
For the processing of Insights data, we and Facebook are so-called “joint controllers”. This means that Facebook and we process this data with the common purpose of understanding the usage behavior of visitors to our fan page. As the operator of the platform, Facebook collects detailed usage data from you; we receive only aggregated Insights data from Facebook. Therefore, only Facebook makes decisions regarding the processing of usage data in connection with Page Insights. In the event of such joint controllership, the EU General Data Protection Regulation requires that we conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum. It contains further details and explanations on joint controllership with Facebook in the context of Insights.
d. Likes, posts and messages
When you use our Facebook page, we process
- your Facebook user name and your profile picture
- your click interactions with our posts (“likes”, “shares”, etc.), and
- your comments, posts, messages and other content that you provide to us on our Facebook page.
The legal basis for processing is Article 6(1)(f) GDPR (balancing of interests). We process your data to provide you and other users of our Facebook page with interesting information and to inform you regularly about our offering.
b) Data processing by Facebook
We have no access to other personal data processed when you use Facebook. Facebook’s privacy policies apply to the processing of your personal data by Facebook (https://de-de.facebook.com/policy.php).
Please note in particular the following:
a. Data transfer to the USA and other third countries
To provide our Facebook page on the Facebook platform, your personal data is processed by Facebook Ireland Limited and transferred to Facebook in the USA (as well as other third countries as set out at https://de-de.facebook.com/policy.php). Facebook uses the European Commission’s approved Standard Contractual Clauses and, for data transfers from the EEA to the USA and other countries, may rely on the European Commission’s adequacy decisions for certain countries.
Meta may transfer your data to servers worldwide. Transfers to countries for which an adequacy decision of the EU Commission exists are based by Meta on the relevant adequacy decision. Transfers to the USA are based by Meta, inter alia for Facebook, on the EU-US Data Privacy Framework. Transfers to countries without an adequate level of data protection are based by Facebook on the EU Standard Contractual Clauses. Details can be found in the following section of Facebook’s privacy policy:
Privacy
Privacy Policy
Controller:
mypado GmbH
Zinkhüttenweg 17
44143 Dortmund
Tel.: +49 (0) 231 56 55 96 60
Fax: +49 (0) 231 56 55 96 62
E-mail: info@mypado.de
1.) Processing of personal data
Within the scope of this website, we process your personal data, among other things, as follows (for further data processing carried out in connection with the website, please refer to the following sections of this privacy policy):
Log files when visiting the website
When you use our website, our hosting provider logs so-called “log file” data upon each access to the servers, such as the name of the website accessed, the previously visited page (“referrer” URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.
The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest in storing log file data lies in ensuring system security, including investigating misuse. Log file data is deleted or anonymized after no more than 30 days, unless it is required for a longer period due to a security-relevant incident, e.g., for investigation or evidentiary purposes.
Contacting us:
When you contact us, we process your personal data such as name, address, e-mail address, telephone number or similar data that we need to respond to your inquiry.
The legal basis for processing your personal data in connection with contact inquiries is Article 6(1)(b) GDPR where your request aims at concluding a contract; otherwise Article 6(1)(f) GDPR, whereby our legitimate interest lies in responding to inquiries.
In connection with contact inquiries, we store your personal data for as long as necessary to process your request or with regard to statutory retention obligations.
Registration/Orders:
When you register or place orders, we process your personal data such as name, address, e-mail address, telephone number, date of birth, user name of your choice, payment data, etc., which we require to fulfill the contractual relationship with you or to carry out pre-contractual measures taken at your request.
We store the personal data collected in the course of registration or orders for as long as necessary to fulfill the contractual relationship (possibly including provision of the customer account) and/or to carry out pre-contractual measures at your request and/or with regard to warranty, guarantee or comparable obligations and/or with regard to statutory retention periods.
The legal basis for processing your personal data collected in the course of registration or orders is Article 6(1)(b) GDPR (“performance of a contract”).
Providing this personal data is not legally or contractually required. However, it is necessary for concluding the contract, i.e., for carrying out the registration or order, insofar as the relevant information is mandatory (rather than optional) in our registration/order process.
Newsletter:
If you subscribe to our newsletter, we process the data collected for this purpose, such as your e-mail address, salutation, etc., for the purpose of sending the newsletter.
Where processing for the above purposes is based on your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, processing is carried out on the basis of Article 6(1)(f) GDPR (“legitimate interests”), whereby the legitimate interests lie in the purposes mentioned above.
We store the personal data required for sending the newsletter for as long as we need it for this purpose or until you withdraw your consent to receive the newsletter. Any legitimate continued storage for other purposes (e.g., customer communications) remains unaffected.
2.) Cookies
Cookies are small text files stored on the user’s computer that enable analysis of how the website is used by the user.
Cookies can be used, for example, to make the use of the website easier and more convenient for visitors or to enable certain functions in the first place, or, for example, to analyze visitor flows.
Where personal data is also processed by individual cookies used by us, processing takes place pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR in the case of consent given, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in the economical operation of our online offering as well as a user-friendly and effective design of the site visit.
The storage period of cookies may be limited to the duration of the respective browser session, i.e., the cookies are deleted after the browser is closed (temporary cookies); or the storage period may go beyond this in order to recognize the user upon the next visit and then, for example, display preferred content (persistent cookies). Unless we state otherwise in this privacy policy or in our cookie management services or other separate information on cookies, you should assume that cookies are persistent and the storage period is up to two years.
You can withdraw consent given for the setting of cookies at any time or object to data processing by cookies by deleting the cookies in your browser settings.
You can also set your browser so that cookies are only stored with your consent.
A way to withdraw, object and/or manage your cookies can be found here:
With regard to advertising cookies, you can block and/or manage many of them via the following services:
However, if you refuse cookies, you may not be able to use certain website functions, services, applications or tools.
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp
However, if you refuse cookies, you may not be able to use certain website functions, services, applications or tools.
3.) Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called “cookies”, text files that are stored on your computer and enable analysis of your use of the website.
Google may transfer your data to servers worldwide. Transfers of data to the USA are based by Google on the EU-US Data Privacy Framework. Transfers to countries without an adequate level of data protection are based by Google on the EU Standard Contractual Clauses. Details can be found in the following section of Google’s privacy policy:
https://policies.google.com/privacy/frameworks
You can find Google’s privacy policy at: https://policies.google.com/privacy
Data processed in connection with the use of Google Analytics is automatically deleted after a maximum of 26 months.
Where processing for the above purposes is based on your consent, the legal basis is Article 6(1)(a) GDPR (consent). Otherwise, processing is carried out on the basis of Article 6(1)(f) GDPR (“legitimate interests”), whereby the legitimate interests lie in the purposes mentioned above.
You can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available via the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
4.) Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website.
Google Tag Manager is a tool from Google for integrating, managing and further using Google services and third-party services on our website for analytics, site optimization and/or advertising purposes. These services are integrated into our website via tags (i.e., additional code inserted into the source code of our website).
The Tag Manager itself (which implements the tags) does not, according to Google, access the data collected via the tags.
More detailed information on data processing can be found on Google’s pages:
https://www.google.com/intl/de/tagmanager/faq.html
https://www.google.com/intl/de/tagmanager/use-policy.html
https://policies.google.com/privacy?hl=de&gl=de
You can object to collection via Google Tag Manager at any time. See letter d. in the “Cookies” section of this privacy policy.
5.) Presence on Facebook
We operate a presence on the social network Facebook.
Your personal data is processed by us and, above all, by Facebook. Below we describe which data about you we process on our Facebook page and our relationship to Facebook in this context.
a) Which personal data do we process when you use our Facebook page?
When you use our Facebook page, we process the following personal data:
a. Communication
We operate our presence on Facebook to present our goods and/or services and to communicate with customers and prospects.
The legal basis for our processing of the relevant communications with you is Article 6(1)(f) GDPR (“legitimate interests”), whereby our legitimate interests lie in the purposes mentioned above. For orders placed via our presences on social networks, the legal basis is also Article 6(1)(b) GDPR (“performance of a contract”).
b. Technical usage data
When you use our Facebook page, we process technical information about your visit to our page, such as the IP address of your device, the time of your visit and the website from which you visit us. We process this data for technical administration and provision of the Facebook page and to obtain, as the operator of the page, statistical information about the use of our Facebook page.
The legal basis for processing your data is Article 6(1)(f) GDPR. Our interest lies in continuously improving our Facebook page and providing you with information that is interesting and relevant to you.
c. Statistical usage data
We also collect statistical usage data. This includes, for example, information about viewing pages, posts or videos, subscriptions, likes of posts, recommendations of posts or comments, sharing content, reactions or comments to posts, reporting posts, clicks on links on other pages leading to the fan page, mouse movements over names or profile pictures to obtain a preview of content, clicks on buttons on a fan page and the device (computer or mobile device) with which you are logged in.
We receive such “usage data” only in aggregated form via the Facebook “Page Insights” tool (https://www.facebook.com/business/a/page/page-insights and https://de-de.facebook.com/legal/terms/information_about_page_insights_data) (“Insights data”). We cannot assign Insights data to you personally.
We process this data for the technical administration and provision of our Facebook page and to obtain, as the operator of the page, statistical information about the use of our fan page. The legal basis for processing this data is Article 6(1)(f) GDPR. Our interest here is the administration and improvement of the Facebook page.
For the processing of Insights data, we and Facebook are so-called “joint controllers”. This means that Facebook and we process this data with the common purpose of understanding the usage behavior of visitors to our fan page. As the operator of the platform, Facebook collects detailed usage data from you; we receive only aggregated Insights data from Facebook. Therefore, only Facebook makes decisions regarding the processing of usage data in connection with Page Insights. In the event of such joint controllership, the EU General Data Protection Regulation requires that we conclude a contract with Facebook. You can access this contract here: https://www.facebook.com/legal/terms/page_controller_addendum. It contains further details and explanations on joint controllership with Facebook in the context of Insights.
d. Likes, posts and messages
When you use our Facebook page, we process
- your Facebook user name and your profile picture
- your click interactions with our posts (“likes”, “shares”, etc.), and
- your comments, posts, messages and other content that you provide to us on our Facebook page.
The legal basis for processing is Article 6(1)(f) GDPR (balancing of interests). We process your data to provide you and other users of our Facebook page with interesting information and to inform you regularly about our offering.
b) Data processing by Facebook
We have no access to other personal data processed when you use Facebook. Facebook’s privacy policies apply to the processing of your personal data by Facebook (https://de-de.facebook.com/policy.php).
Please note in particular the following:
a. Data transfer to the USA and other third countries
To provide our Facebook page on the Facebook platform, your personal data is processed by Facebook Ireland Limited and transferred to Facebook in the USA (as well as other third countries as set out at https://de-de.facebook.com/policy.php). Facebook uses the European Commission’s approved Standard Contractual Clauses and, for data transfers from the EEA to the USA and other countries, may rely on the European Commission’s adequacy decisions for certain countries.
Meta may transfer your data to servers worldwide. Transfers to countries for which an adequacy decision of the EU Commission exists are based by Meta on the relevant adequacy decision. Transfers to the USA are based by Meta, inter alia for Facebook, on the EU-US Data Privacy Framework. Transfers to countries without an adequate level of data protection are based by Facebook on the EU Standard Contractual Clauses. Details can be found in the following section of Facebook’s privacy policy: