1. Name and contact data of the controller responsible for processing data [optionally: and of the company’s Data Protection Officer]
This Privacy Notice applies to data processing by:
Controller: SerrentiS GmbH, Fraunhoferstr. 4, 85737 Ismaning, Germany
Phone: +49 (0)89 - 85631014
Fax: +49 (0)30 – 85631019
2. Collection and storage of personal data, and the nature and purpose of its use
a) When you visit the website
When you call our website www.serrentis-hotelsupplies.de, the browser used on your device automatically sends information to our website’s server. This information is stored temporarily in a log file. The following information is recorded without any action on your part and is stored until it is automatically erased:
- the IP address of the computer system calling the site,
- the date and time you accessed the site,
- the name and address of the file called,
- the website from which you accessed our site (referrer URL),
- the browser you use and, if applicable, the operating system of your computer and the name of your access provider.
This data is processed by us for the following purposes:
- to ensure a connection to the website is established smoothly,
- to ensure our website is convenient to use,
- to analyse system security and stability, and
- for other administrative purposes.
b) When you subscribe to our newsletter
If you have given your explicit consent in accordance with Article 6 (1) sentence 1 point (a) GDPR, we use your e-mail address to send you our newsletter regularly. You only need to disclose an e-mail address so as to receive the newsletter. You can cancel your subscription at any time, such as by clicking on the link at the end of each newsletter. Alternatively, you can ask for your subscription to be cancelled at any time by sending an e-mail to firstname.lastname@example.org.
c) When you use our contact form
We offer you the possibility of contacting us using a form provided on the website if you have any questions, of whatever nature. You must specify a valid e-mail address so that we know from whom the request is and can respond to it. Other data can be disclosed voluntarily. Data is processed for the purpose of contacting us on the basis of your voluntary consent in accordance with Article 6 (1) sentence 1 point (a) GDPR. The personal data we collect when you use the contact form is automatically erased when your request has been dealt with.
3. Use of your data for marketing purposes
Apart from processing your data to perform contracts concluded with us, we also use your data so that we can make queries about and share information about your orders, inform you about specific products or marketing campaigns, and recommend products or services that might be of interest to you.
a) Sending of the newsletter
The data you specified when you subscribed to the newsletter (e-mail address, first name, surname and gender) is stored and used solely to send the SerrentiS newsletter.
C A N C E L L A T I O N P O L I C Y
If we use your e-mail address, for example to send newsletters or service and product information mails, we offer you the possibility of objecting to being sent further e-mails in every newsletter (by means of an unsubscribe link) and in every service and product information mail.
You can also call the form for cancelling your subscription to the newsletter here.
b) Service and product information
If we have obtained your e-mail address when you ordered goods in our online shop, we use your e-mail address to send you service and product information mails about similar products that might be of interest to you (such as on the content of your shopping cart, too). However, we use your e-mail address for these purposes only if you have not objected to such use. You can object to such use at any time; you will not incur any costs other than the basic costs of transmission for that. Your e-mail address is not passed on to third parties.
c) Advertising on the basis of utilisation data
We endeavour to make our online shop as attractive as possible for you and to optimise it. When you buy products from our online shop and send information as part of that (such as information about your computer, the connection to the Internet, the operating system, your order history, the time of your visit and when you called certain pages in our online shop, or the dwell time on certain product pages), this information is automatically recorded, analysed and evaluated. The data is used exclusively in pseudonymised form, i.e. we do not use it to identify you.
We use the information you disclose to us so that we can send advertising for products that might actually be of interest you, on the basis of the above utilisation data.
D E C L A R A T I O N O F C O N S E N T
I consent to my data (name, address, fax number, e-mail address, and tax number) being collected, processed and used by SerrentiS GmbH for the purpose of contacting me and correspondence (including for sending invoices and relating to payment), goods logistics, advertising products, and supplying information on the range of products and services of SerrentiS GmbH and to my data being passed on or transmitted to the commissioned tax consulting/accounting office, web architect, and payment and logistics service provider and also being used there for the stated purposes.
I have been informed and agree that personal data concerning me and collected as part of the above purposes will be collected, processed, used and transmitted in compliance with prevailing data protection laws. The same shall apply to data I disclose during my visits to the online shop of Serrentis GmbH and further information stored in my customer account, as well as pseudonymised utilisation data.
I have also been informed that my data is collected, processed and used on a voluntary basis, as well as that I can refuse my consent and withdraw it any time with effect for the future, without any detrimental consequences for me. I will submit any withdrawal of my consent to:
SerrentiS GmbH, Fraunhoferstr. 4, 85737 Ismaning, Germany
If I withdraw my consent, my data will be erased at SerrentiS GmbH as well as at the commissioned tax consulting/accounting office, web architect, and payment and logistics service provider when my withdrawal of consent is received.
4. Transmission of data
Your personal data is not transferred to third parties for purposes other than those specified in the following. We disclose your personal data to third parties only if:
- you have given your explicit consent in accordance with Article 6 (1) sentence 1 point (a) GDPR,
- it must be disclosed in accordance with Article 6 (1) sentence 1 point (f) GDPR to enable the establishment, exercise or defence of legal claims and there is no reason to assume that you have overriding legitimate interests in your data not being disclosed,
- there is a legal obligation to disclose the data in accordance with Article 6 (1) sentence 1 point (c) GDPR, and
- that is permitted by law and is required pursuant to Article 6 (1) sentence 1 point (b) GDPR for handling contractual relationships with you. Wirecard: https://www.wirecardbank.com/GDPR
We also use temporary cookies, which are stored on your device for a specific defined period of time, to optimise the user-friendliness of our site. When you visit our site again in order to make use of our services, we automatically recognise that you have previously visited us and what inputs and settings you made, meaning you do not have to enter them again.
5. Analytics tools
a) Tracking tools
The legal basis for the following tracking measures we use is Article 6 (1) sentence 1 point (f) GDPR. Our objective with the tracking measures we use is to ensure our website is tailored to needs and is continuously optimised. We also use the tracking measures to record statistics on use of our website and analyse them so as to optimise our offering for you. These interests should be regarded as legitimate within the meaning of the above provision. The purposes of processing the data and the categories of data can be referred to in the descriptions of the tracking tools.
(i) We use Google Analytics, a web analytics service from Google Inc. (https://www.google.de/intl/en/about/), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”), for tailoring our web pages to needs and continuously optimising them. In this connection, pseudonymised user profiles are created and cookies used (see section 4). The information generated by the cookie and relating to your use of this website, such as
- the browser type you use and its version,
- the operating system you use,
- the referrer URL (the page you previously visited),
- the host name of the computer system accessing the site (IP address),
- the time of the server request,
are transferred to a Google server in the USA and stored there. The information is used to evaluate use of the website, to compile reports on website activities and to provide other services relating to website and Internet use for the purposes of market research and tailoring these web pages to needs. This information may also be transferred to third parties if this is prescribed by law or third parties process this data on behalf of Google. Google never combines your IP address with other data. The IP addresses are anonymised so that they cannot be associated with a particular person (IP masking). You can prevent installation of the cookies by making the appropriate setting in your browser software; however, we point out that if you do so, some of the functions of this website may not be able to be used in full.
You can also prevent recording of the data relating to your use of the website and generated by the cookie (including your IP address) and processing of this data by Google by downloading and installing a browser add-on available at: https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative to the browser add-on, in particular for browsers on mobile devices, you can also prevent data being recorded by Google Analytics by clicking on this link. That sets an opt-out cookie that prevents future recording of your data when you visit this website. The opt-out cookie only applies in the browser in question and only for our website and is stored on your device. If you delete the cookies in that browser, you have to set the opt-out cookie again. You can find more information on data protection in connection with Google Analytics in, for example, the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
(ii) Google AdWords conversion tracking
We also use Google AdWords conversion tracking to record statistics on use of our website and analyse them so as to optimise our website for you. If you access our website after clicking on a Google ad, Google AdWords stores a cookie on your computer system (see section 4). These cookies lose their validity after 30 days and are not used to identify users personally. If the user visits specific pages on the website of the AdWords customer and if the cookie has not yet expired, Google and the customer will be able to tell that the user clicked on the ad and was forwarded to this page.
Every AdWords customer receives a different cookie. That means cookies cannot be tracked via the websites of AdWords customers. The information collected by the conversion cookie is used to create conversion statistics for AdWords customers who have opted-in for conversion tracking. AdWords customers are informed about the total number of users who clicked on their ad and were forwarded to a page with a conversion tracking tag. However, they do not obtain any information enabling them to identify users personally. If you do not wish to participate in this tracking method, you can reject placement of a cookie required for it – such as by generally deactivating automatic placement of cookies in your browser setting.
You can also deactivate cookies for conversion tracking by setting your browser so that cookies are blocked by the domain “www.googleadservices.com.” You can find Google’s data privacy statement on conversion tracking at: https://services.google.com/sitestats/en.html.
We use the open source software Matomo to analyse, and evaluate statistics on, use of the website. Cookies are used for that (see Section 4). The information on the use of the website generated by the cookie is sent to our servers and grouped in pseudonymous user profiles. The information helps us analyse use of our website and tailor it to needs.
The information is not passed on to any third party. The IP address is never linked with other data concerning the user. The IP addresses are anonymised so that they cannot be associated with a particular person (IP masking). Your visit to this website is currently recorded by Matomo web analytics. If you do not want our visit to be recorded any more, click here: https://matomo.org/privacy-policy/.
6. Social media plug-ins
Pursuant to Article 6 (1) sentence 1 point (f) GDPR, we use social plug-ins from the social networks Facebook, Twitter and Instagram on our website in order to increase awareness of our company. The marketing purpose behind that constitutes our legitimate interest within the meaning of the General Data Protection Regulation. The respective provider is responsible for operation of its site and social network in compliance with data protection requirements. The plug-ins are integrated by us using the two-click method so that visitors to our website are given the best-possible protection.
Social media plug-ins from Facebook are used on our website to make use of it more personalised. We use the “Like” or “Share” button for that. This is an offering from Facebook. When you call a page on our web presence that contains such a plug-in, your browser establishes a direct connection to Facebook’s servers. The plug-in’s content is transmitted by Facebook directly to your browser and integrated by the latter in the website. Integration of the plug-ins means Facebook is informed that your browser has called the page on our web presence, even if you do not have a Facebook account or are not currently logged on to Facebook. This information (including your IP address) is transmitted by your browser directly to a Facebook server in the USA and stored there.
If you are logged on to Facebook, Facebook can directly assign your visit to our website to your Facebook account. When you interact with the plug-ins, such as by pressing the “Like” or “Share” button, the information is likewise sent directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends. Facebook can use this information for advertising, market research and tailoring the Facebook pages. As part of that, Facebook creates profiles on usage, interests and relationships, for example to analyse your use of our website in relation to the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide other services relating to use of Facebook. If you do not want Facebook to assign the data collected through our web presence to your Facebook account, you must log out of Facebook before you visit our website. Please refer to Facebook’s Data Policy for details of the purpose and scope of data collection, how the data is processed and used further by Facebook, your related rights and settings you can make to protect your privacy (https://www.facebook.com/about/privacy/).
Plug-ins from the SMS network Twitter Inc. (“Twitter”) are integrated on our web pages. The Twitter plug-ins (tweet button) can be recognised from the Twitter logo on our site. You can find an overview of the tweet buttons at: https://about.twitter.com/en_us/company/brand-resources.html . When you call a page containing such a plug-in on our web presence, a direct connection between your browser and the Twitter server is established. Twitter is thereby informed that you have visited our site under your IP address. If you click on Twitter’s “tweet” button while you are logged in to your Twitter account, you can link the content of our pages on your Twitter profile. As a result, Twitter can assign your visit to our pages to your user account.
Social plug-ins (“plug-ins”) from Instagram, which is operated by Instagram Deutscher Anwaltverein 3 LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”), are used on our website. The plug-ins are indicated by an Instagram logo, for example in the form of an “Instagram camera.” When you call a page on our web presence that contains such a plug-in, your browser establishes a direct connection to Instagram’s servers. The plug-in’s content is transmitted by Instagram directly to your browser and integrated in the page. Integration of it means Instagram is informed that your browser has called the page on our web presence, even if you do not have an Instagram profile or are not currently logged on to Instagram. This information (including your IP address) is transmitted by your browser directly to an Instagram server in the USA and stored there. If you are logged on to Instagram, Instagram can directly assign your visit to our website to your Instagram account. When you interact with the plug-ins, such as by pressing the “Instagram” button, this information is likewise sent directly to an Instagram server and stored there. The information is also published on your Instagram account and shown there to your contacts.
7. Rights of data subjects
You have the right to:
- demand, in accordance with Article 15 GDPR, information on and access to your personal data we have processed. In particular, you can demand information on the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the length of time it is to be stored for, the existence of a right to rectification, erasure or restriction of processing of your data or to object to its being processed, the existence of a right to lodge a complaint, and the origin of your data if it is not collected by us, as well as the existence of automated decision-making, including profiling, and any meaningful information about the details of that;
- demand, in accordance with Article 16 GDPR, immediate rectification of incorrect personal data we have stored concerning you and demand that incomplete personal data is completed;
- demand, in accordance with Article 17 GDPR, erasure of personal data we have stored concerning you, unless processing of it is required for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- demand, in accordance with Article 18 GDPR, restriction of processing of your personal data, if you dispute the correctness of the data, processing of it is unlawful, but you oppose its erasure and we no longer need the data, but you need it to establish, exercise or defend legal claims, or you have objected to processing of your data in accordance with Article 21 GDPR;
- receive the personal data you have provided, in a structured, commonly used and machine-readable format, or demand that your data be transmitted to another controller in accordance with Article 20 GDPR;
- revoke your consent to processing of your data at any time in accordance with Article 7 (3) GDPR. As a consequence, we will no longer be allowed to continue processing the data on the basis of your prior consent with future effect; and
- lodge a complaint with a supervisory authority in accordance with Article 77 GDPR. You can usually do so with the supervisory authority responsible for your habitual residence, place of work or the location of our company’s registered offices.
8. Rights of users
a) Withdrawal of consent
If you have consented to collection, storage and use of personal data when using the website or purchasing products, you can withdraw such consent at any time. If you wish to make use of your right to revoke your consent or object, simply send an e-mail to email@example.com or a written declaration to the contact address stated in section 2. Such withdrawal of consent shall only apply to personal data that we are not allowed to stored and use in cases permitted by the law, including without your consent.
b) Access to, information on, rectification, erasure and blocking of data
We will provide you with information at any time about what personal data concerning you we have stored, if you request so in writing or text form. You can also demand at any time that we rectify, block or erase your personal data. To do that, please get in touch with us under the address stated in section 2. We will only not erase data which we require to handle outstanding tasks or to establish existing rights and claims, as well as data we have to retain pursuant to statutory regulations. However, such data will be blocked.
9. Right to object
If your personal data is processed to safeguard legitimate interests in accordance with Article 6 (1) sentence 1 (f) GDPR, you have the right under Article 21 GDPR to object to processing of your personal data if there are grounds relating to your particular situation or the objection is to direct marketing. In the latter case, you have a general right to object and we will comply with that right without any need for you to specify grounds relating to your particular situation.
If you wish to make use of your right to revoke your consent or object to processing, simply send an e-mail to firstname.lastname@example.org.
10. Data security
As part of your visit to the website, we use the widespread SSL (Secure Socket Layer) method together with the highest encryption level supported by your browser. That is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.
You can tell whether an individual page of our web presence is transferred in encrypted form from the fact that the key icon or the padlock icon appear locked in the lower status bar of your browser. We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, complete or partial loss and destruction, or access by unauthorised third parties. Our security measures are constantly improved to reflect technological advances.
11. Up-to-dateness of and amendments to this Privacy Notice
This Privacy Notice is currently valid in its version dated May 2018. This Privacy Notice may need to be amended if our website and offerings on it are developed further or pursuant to changes in the law or official requirements.
You can obtain and print out the up-to-date Privacy Notice at any time on the website at https://www.serrentis-hotelsupplies.com/en/privacy-notice.