Privacy Policy
Note: The privacy policy has been automatically translated for your convenience. Only the original German version is legally binding.
I. General information and legal basis
The following declaration informs you about what kind of personal data is collected for what purpose by us as the responsible party and to what extent this data is made available to third parties.
1. Responsible body
edelsprint UG (haftungsbeschränkt)
Technologiepark 8, 33100 Paderborn
Telefonnummer: 05251 60 2391
2. Legal basis of the processing
The processing of personal data requires a legal basis, which we would like to present to you in the following.
When processing personal data for which we obtain the consent of the data subject, Article 6 paragraph 1 letter a of the EU Data Protection Regulation (GDPR) serves as the legal basis. In the processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Article 6 paragraph 1 lit. b GDPR serves as the legal basis. This also includes processing operations which are necessary to carry out pre-contractual measures.
Insofar as processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Article 6 paragraph 1 lit. c GDPR serves as the legal basis. If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Article 6 paragraph 1 letter f GDPR serves as the legal basis for the processing. The legitimate interest of our company lies in the performance of our business activities and in the analysis, optimization and maintenance of the security of our online offer.
II. Log files, hosting
We take up hosting services. These serve to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services to maintain the operation of this online offer.
In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors of this online offer based on our legitimate interests in an efficient and secure provision of this online offer.
III. Contractual processing
The personal data provided by you for contractual purposes, e.g. for quotation requests, such as name, address or e-mail address, will only be used internally to answer your inquiries, process your orders or provide you with access to certain contractual information.
IV. Contact
When you contact us by e-mail or via chat, your details will be stored by us to answer your questions. As a matter of principle, we do not pass on your data to third parties, unless applicable data protection regulations justify a transfer or we are legally obliged to do so. You can revoke your given consent at any time with effect for the future. In the event of revocation, your data will be deleted immediately, unless there is a legal exception for further processing. Your data will otherwise be deleted when we have processed your request or the purpose of storage has ceased to exist and there are no other conflicting legal exceptions.
We use HubSpot CRM of the service provider HubSpot (HubSpot Inc., 25 First Street, Cambridge, MA 02141 USA) for the processing of form requests. You can view the privacy policy here: https://legal.hubspot.com/de/privacy-policy. EU standard contract clauses have been agreed upon with HubSpot, so that we have taken possible measures to ensure the European data protection law.
V. Cookies
This site uses cookies. Cookies are small text files that are stored on your computer and through which the site that sets the cookie receives certain information. They are used to make the internet offer more user-friendly and effective and/or to facilitate your navigation on our website. We only set cookies, which are not absolutely necessary, with your consent. You can revoke this consent at any time for future use.
The consent is voluntary and you can also use our services without accepting cookies. You can also configure your browser settings according to your wishes and, for example, reject the acceptance of third party cookies or all cookies or delete already stored cookies. If you do not accept cookies, please note that in this case our services may not function correctly. Unless we provide other information on the individual topics mentioned in this data protection declaration, the lifetime of the cookies refers to 24 months. To find out which function sets cookies on our website, please refer to the individual functions below.
VI. Newsletter
If you would like to receive the newsletter offered on our website, we require a valid e-mail address from you, which allows us to verify that you are the owner of the e-mail address provided or that the owner of the e-mail address agrees to receive the newsletter. After providing the e-mail address, we will send you a confirmation e-mail to the specified address in which we ask you to confirm that you wish to receive the newsletter. If you confirm your wish to receive the newsletter, we will save your e-mail address until you unsubscribe. We only send newsletters with your consent or a legal permission.
We work together with a shipping service provider. The newsletter is sent via HubSpot (HubSpot Inc., 25 First Street, Cambridge, MA 02141 USA). The privacy policy can be viewed here: https://legal.hubspot.com/de/privacy-policy. EU standard contract clauses have been agreed with HubSpot, so that we have taken possible measures to ensure European data protection law. The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose there is a corresponding link in every newsletter. This also allows the user to revoke his or her consent to the storage of personal data collected during the registration process.
VII. Registration
Our website offers a registration option. The personal data entered during the registration process is transferred to the data controller. The data will be stored exclusively for the purpose of internal use by us. During registration, the IP address of the user as well as the date and time of registration are stored. This serves to prevent misuse of the services. The data will not be passed on to third parties. An exception is made if there is a legal obligation to pass on data. The registration of the data is necessary for the provision of content or services. Registered persons have the possibility to delete or change the stored data at any time. The person concerned will receive information about the personal data stored about him/her at any time.
VIII. Our presence in social media
You can find us under Online Presences within social networks and platforms. With these presences we would like to communicate with our customers, interested parties and users and inform them about our services and our company. The personal data of the users active there is processed on the basis of our legitimate interest in communication and the provision of information to and with the users. If the users have given their consent to data processing within the framework of the respective social platform, the processing is carried out on this basis of consent.
If you visit one of our social media sites, we are responsible, together with the operator of the social platform, for the data processing operations triggered during this visit. You can basically assert your rights (information, correction, deletion, restriction of processing, data transferability and complaint, see the following point “Rights of the data subject”) both against us and against the operator of the respective social platform. We would like to point out that, despite the joint responsibility, we do not have full influence on the data processing procedures of the social platform and, if necessary, for a better processing of the data subject’s rights, we forward the rights request to the respective operator. Our possibilities are basically based on the corporate policy of the respective provider.
You will find our information on storage below. We have no influence on the storage period of your data, which is stored by the operator of the social platform for its own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Depending on the following named social platform, the data processing of users may also take place outside the area of the European Union. EU standard contract clauses have been agreed with the US companies, so that we have taken possible measures to ensure European data protection law.
User data is usually processed by the platforms for market research and advertising purposes. For example, user profiles can be created from the user behavior and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Data can also be stored in the user profiles independently of the devices used by the users. This is particularly the case if the users are members of the respective platforms and are logged in to them.
For a detailed presentation of the respective processing and the possibilities of objection, we refer to the following linked information of the providers.
Facebook (pages, groups)
(Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); based on an agreement on joint processing of personal data: https://www.facebook.com/legal/terms/page_controller_addendum; privacy policy: https://www.facebook.com/about/privacy/; opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.comGoogle/YouTube
(Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); privacy policy: https://policies.google.com/privacy; opt-out: https://adssettings.google.com/authenticatedInstagram
(Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA); privacy policy: https://help.instagram.com/519522125107875; opt-out: http://instagram.com/about/legal/privacy/Twitter
(Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA);pPrivacypPolicy: https://twitter.com/de/privacy; opt-out: https://twitter.com/personalizationLinkedIn
(LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland);pPrivacypPolicy: https://www.linkedin.com/legal/privacy-policy; opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-outXing
(XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany); privacy policy: https://privacy.xing.com/en/privacy-policy; opt-out: https://privacy.xing.com/de/datenschutzerklaerung
IX. Transfer of data to third parties: General and contractual purpose
We pass on data to third parties if this is necessary for the fulfilment of the contract and/or if we are legally obliged and/or entitled to do so in individual cases.
1. Payment service: Stripe
We use Stripe, an offer of the American Stripe Inc., 185 Berry Street, Suite 550, San Francisco, CA 94107, USA (hereinafter “Stripe”) to process payments via our website. In particular, Stripe has published the following information on the type, scope and purpose of data processing in its data protection declaration: https://stripe.com/de/privacy#translation. Via Stripe it is possible to offer different payment methods, such as credit card payments or direct debit. In this context Stripe offers software interfaces to integrate these payment methods with us. The crediting of a payment transaction is then carried out for us via a so-called Stripe account.
If you make a payment via our platform, the data of the person concerned is automatically transferred to Stripe. By selecting this payment option, the person concerned agrees to the transfer of personal data required for the payment process.
The personal data transmitted to Stripe is usually first name, surname, address, e-mail address, IP address, telephone number, cell phone number or other data, as well as financial transaction data, such as credit card number or account data, which is necessary for processing the payment. Personal data that is necessary for the processing of the contract is also that which is related to the respective service.
The transmission of the data is intended for payment processing and fraud prevention. The personal data exchanged between Stripe and us may be transferred by Stripe to credit agencies. The purpose of this transmission is to check identity and creditworthiness within the scope of our legitimate interest.
Stripe may pass on the personal data to affiliated companies and service providers or subcontractors, if this is necessary to fulfil contractual obligations or if the data is to be processed on behalf of an order.
2. Chargebee
As another payment service provider, we use Chargebee, a service of Chargebee Inc, 340 S Lemon Avenue, #1537, Walnut, California 91789, USA. EU standard contractual clauses have been agreed with Chargebee, so that we have taken possible measures to ensure that European data protection law is observed. For more information about Chargebee’s privacy policy, please visit https://www.chargebee.com/privacy.html.
X. Transfer of data to third parties: tools for the economic operation of the website
In some cases we make use of external service providers within the scope of your consent or our legitimate interests with regard to analysis, optimization and economic operation of the online offer. This basically presupposes that the third party providers of this content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore necessary for the display of this content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information similar to log files. In the following we list our service providers.
If your data is to be used for other purposes, we will inform you in advance and will only use the data if you have given your express permission to do so.
1. Service provider Google
We use, within the scope of our agreement with you, services for which Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) is responsible for the analysis, optimization and economic operation of our online offer. EU standard contract clauses have been agreed with Google, so that we have taken possible measures to ensure compliance with European data protection law.
a. Google Analytics
This website uses Google Analytics as a web analysis service. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your IP address) is transferred to a Google server in the USA and stored there.
We would like to point out that this website uses Google Analytics with the extension “_anonymizeIp()” and therefore IP addresses of Google in member states within the European Union or in other signatory states to the Agreement on the European Economic Area are shortened before transmission in order to exclude any direct personal reference. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the provider, Google will use this information to evaluate your use of the website, to compile reports on website activity for the website operator and to provide other services related to website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. The purpose and scope of data collection and the further processing and use of data by Google as well as your rights and setting options for the protection of your privacy can be found in the data protection information from Google under http://www.google.de/intl/de/policies/privacy/?hl=de and especially for Google Analytics under https://www.google.com/policies/privacy/partners/?hl=de and under https://support.google.com/analytics/answer/6004245?hl=de and for Universal Analytics at https://support.google.com/analytics/answer/2838718?hl=de.
The data collection and storage by Google for the respective end device can be contradicted at any time with effect for the future in connection with the use under this link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the collection by Google Analytics by clicking the following button:
b. Google AdWords and Conversion Tracking
This website uses “Google Adwords” and within Google Adwords the conversion tracking. If you click on an advertisement placed by Google, so-called “cookies”, text files which are stored on your computer, are set. The cookies lose their validity after 30 days and are not used for personal identification. This enables Google and us to recognize that the user clicked on the ad and was redirected to this page. The conversion cookies are used to create conversion statistics for AdWords customers. These customers receive the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. Personal identification is not possible for these customers either. You can object to this use by deactivating the Google Conversion Tracking cookie in your Internet browser. You will then not be included in the conversion tracking statistics. For more information about Google’s privacy policy, please visit the following web address: http://www.google.de/intl/de/policies/privacy.
c. YouTube
We use the provider YouTube, a service of Google, to integrate videos. These videos are stored on www.youtube.com and can be played directly from our site. YouTube uses cookies for data collection and statistical data analysis. YouTube uses cookies to collect reliable video statistics, prevent fraud, and improve user experience, among other things. The information generated by the cookie about your use of this website (including your IP address) is transmitted to YouTube servers, including in the United States, and stored there. Your IP address cannot be assigned unless you have logged on to YouTube or another Google service before visiting the site or are permanently logged on. If you do not wish to be logged in, you must log out of your YouTube account and your other Google accounts. YouTube cookies provide us with statistical data on the retrieval of individual videos embedded in the website without any reference to the individual user. YouTube’s embedded videos are used to the extent permitted by YouTube, which all users must accept. If you see any copyright infringement, please report it directly to YouTube. We use embedded YouTube videos in enhanced privacy mode. This means that YouTube does not store cookies for a user who views a website with an embedded YouTube video player, but does not click on the video to start playback. When the YouTube video player is clicked, YouTube may store cookies on the user’s computer. We would like to point out that we, as the provider of the sites, have no knowledge of the content of the transmitted data or its use by YouTube. For more information about YouTube’s official privacy policy, please refer to https://www.google.de/intl/de/policies/privacy/ and https://support.google.com/YouTube/answer/171780?hl=de.
d. Google Fonts
Google Fonts are used to improve the visual presentation of various information on this website. The fonts are transferred to the cache of the browser when the page is called up, so that they can be used for the display. If the browser does not support Google Fonts or prevents access, the text is displayed in a standard font. When the page is called up, no cookies are set for the website visitor. Data transmitted in connection with the page view is sent to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. In this way, it is transmitted which of our Internet pages you have visited. Google also stores the IP address of the browser of the end device of the visitor to these Internet pages. They are not associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. You can set your browser so that the fonts are not loaded from the Google servers. Information about the privacy policy of Google Webfonts can be found at https://developers.google.com/fonts/faq#Privacy. General information on data protection can be found in the Google Privacy Center at http://www.google.com/intl/de-DE/privacy/.
2. Facebook
Within the scope of our legitimate interests in the analysis, optimization and economic operation of our online offer, we use services of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
a. Facebook Custom Audiences and Website Custom Audiences
Our website uses the advertising tools Custom Audiences and Website Custom Audiences from Facebook. Here, a non-reversible and non-personal checksum (hash value) is generated from your usage data, which is transmitted to Facebook for analysis and marketing purposes on its social platform and stored in the USA. The Facebook pixel is directly integrated by Facebook when you call up our websites and can store a so-called cookie, i.e. a small file on your device. If you then log in to Facebook or visit Facebook while logged in, the visit to our online offer will be noted in your profile. The data collected about you is anonymous to us, so we cannot draw conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and can be used by Facebook as well as for our own market research and advertising purposes. If we send data to Facebook for comparison purposes, it is encrypted locally on the browser and only then sent to Facebook via a secure https connection. This is done solely for the purpose of comparing the data with the data similarly encrypted by Facebook.
For more information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to the Facebook data protection information at http://www.facebook.com/about/privacy/, and specifically for Facebook Custom Audiences at https://www.facebook.com/ads/website_custom_audiences/. If you wish to object to the use of Facebook Website Custom Audiences, you can also do so at https://www.facebook.com/ads/website_custom_audiences/. To do so, you must log in to your Facebook account.
To prevent the collection of your data using the Facebook pixel on our website, please click the following button:
3. Font Awesome
This website uses so-called web fonts, which are provided by Fonticons, Inc., 6 Porter Road, Apartment 3R, Cambridge, MA 02140, United States, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to the servers of Fonticons, Inc. This allows Fonticons, Inc. to know that your IP address was used to access our website. The use of web fonts is in our legitimate interest in a consistent and attractive presentation of our online offerings. If your browser does not support web fonts, a standard font is used by your computer. Further information about Font Awesome can be found at https://fontawesome.com/help and in the privacy policy of Fonticons, Inc.: https://fontawesome.com/privacy.
4. Hotjar
We use Hotjar to better understand the needs of our users and to optimize the services on this website. Hotjar’s technology helps us gain a better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click, what they like and don’t like, etc.) and this helps us to tailor our offerings to our users’ feedback. Hotjar uses cookies and other technologies to collect information about the behavior of our users and their end devices (including, but not limited to, IP address of the device (only collected and stored in anonymous form), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), language preferred to view our website). Hotjar stores this information in a pseudonymous user profile. The information is not used by Hotjar or by us to identify individual users or merged with other data about individual users. Further information can be found in Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy. You can opt-out of Hotjar storing a user profile and information about your visit to our website and of Hotjar Tracking Cookies being placed on other websites by clicking this opt-out link: https://www.hotjar.com/legal/compliance/opt-out.
5. HubSpot
On this website we use HubSpot for our online marketing activities. HubSpot is a software company from the USA with a subsidiary in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500. EU standard contract clauses have been agreed with Hubspot so that we have taken possible measures to ensure that European data protection laws are respected. This is an integrated software solution with which we cover various aspects of our online marketing. These include: E-mail marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, accesses, etc.), contact management (e.g. user segmentation & CRM), landing pages and contact forms. More information about HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy, https://legal.hubspot.com/data-privacy, https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser, https://knowledge.hubspot.com/account/hubspot-cookie-security-and-privacy.
If you do not want HubSpot to collect cookies, you may at any time modify the consent given by the cookie banner or prevent their use by changing your browser settings accordingly.
6. Segment
Our website and software use software from Segment.io, Inc. 101 15th St San Francisco, CA 94103 USA. EU standard contractual clauses have been agreed with Segment, so that we have taken possible measures to ensure compliance with European data protection law. Data is collected and stored from which user profiles are created using pseudonyms. These user profiles are used to analyze visitor behavior and are evaluated to improve our offer. Cookies can be used for this purpose, which enable recognition when visiting our website again. The pseudonymized user profiles will not be merged with personal data about the bearer of the pseudonym without a separate, explicit consent to be granted. You can find general information about the privacy policy and the privacy policy of Segment.io at https://segment.com/docs/legal/privacy.
Segment also allows the central consolidation of data from several tools (e.g. software and Google Analytics). The goal is to collect and standardize data and make it available in the relevant areas with a single API.
7. Sentry for error logging
We want to provide the best possible service. But we cannot exclude mistakes. In order to determine whether errors occur in the provision of our service, we use the offer of the service provider Functional Software Inc. (Sentry), 132 Hawthorne Street, San Francisco, CA 94105, USA. EU standard contract clauses have been agreed upon with Sentry, so that we have taken possible measures to ensure compliance with European data protection law. The following data is processed: Complete user data: Data from the software. Sentry allows us to identify errors and correct them in a targeted manner. Further details can be found in the Sentry Privacy Policy, available at https://sentry.io/terms/#privacy.
8. Slack for analysis of system notifications about changes
We use the Slack tool from Slack Technologies Limited, Dublin, Ireland, to analyze system notifications about changes in our software. The following data is processed: User data, hub names.
9. Heap analytics
We use the analysis service of Heap Analytics Inc, 116 Natoma Street 3rd Floor, San Francisco, CA 94105. EU standard contract clauses have been agreed with Heap Analytics, so that we have taken possible measures to ensure compliance with European data protection law. Heap Analytics logs page views and page activity. The information generated by the cookies about your use of our services is usually transferred to a Heap Analytics server in the USA and stored there. Pseudonymous user profiles of the users can be created from the processed data. The abbreviated IP address transmitted by your browser in the context of Heap Analytics is not merged with other data from Heap Analytics. You can find more information about the data protection regulations of Heap Analytics under <www.heapanalytics.com/privacy>. Heap Analytics offers every user there the possibility to prevent the use of the tool by means of a “Do Not Track Header”, so that no data about the visit of the respective services is recorded.
10. Zapier
To integrate different databases and tools we use Zapier, a service of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA. Customer data can be transmitted with the exception of payment data. EU standard contract clauses were agreed upon with Sentry, so that we were able to take possible measures to ensure European data protection law. Further information on data protection at Zapier can be found at https://zapier.com/privacy.
11. Perspective
Within our online offer the so-called “Perspective Funnels”, which are operated by Perspective Digital GmbH and Perspective Software GmbH, Müggelstraße 22, 10247 Berlin, are used. With the help of the Perspective Funnels, interested parties are informed about our range of services and can contact us by phone or e-mail.
XI. Rights of the data subject
You have a right to information about the personal data we have stored about you. According to the legal regulations you also have the right to correct incorrect data, block, transfer and delete your personal data. To do so, please send us an e-mail with the subject “Data protection”. You also have a right to complain to a data protection supervisory authority if you believe that processing of your personal data violates the legal provisions.
If you have given your consent, you have the right to revoke it at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can object to the future processing of your personal data in accordance with the legal requirements at any time. The objection can be made in particular against processing for the purposes of direct advertising.
XII. Storage period of personal data
If we have not provided storage instructions for the specific points, the following applies: We store personal data for the duration of the respective legal retention period or as long as the purpose of the collection exists. After the retention period has expired, the data is routinely deleted, unless it is necessary for the initiation or fulfillment of a contract. If the users’ data is not deleted because it is required for other and legally permissible purposes, its processing is restricted as far as possible. Accordingly, the data will be blocked where possible and not processed for other purposes. This applies, for example, to user data that must be retained for commercial or tax law reasons.
XIII. Safety information
We make every effort to process your personal data by taking all technical and organisational measures to ensure that the regulations of the data protection laws are observed and to protect these data. Our website or communication with us via our website is encrypted using HTTPS.