Privacy Policy
If this privacy policy is provided in other
languages, the German version is the only authoritative version.
Name and
Contact of the Responsible Entity
Printess GmbH & Co. KG
Gutzmannstraße 26
15755 Teupitz
Phone: +49 337 66 469 886
E-mail: info@printess.com
Imprint: https://www.printess.com/imprint
Safety and
protection of your personal
We consider it our primary responsibility to
maintain the confidentiality of the personal data you provide and to protect it
from unauthorized access. That's why we apply extreme care and state-of-the-art
security standards to ensure maximum protection of your personal data.
As a private company, we are subject to the
provisions of the European General Data Protection Regulation (GDPR) and the
provisions of the Federal Data Protection Act (DSGVO).
We have taken technical and organisational measures to ensure that the data
protection regulations are respected by us as well as by our external service
providers.
Definitions
The legislator requires that personal data be
processed in a lawful manner, in good faith and in a manner comprehensible to
the data subject ("legality, processing in good faith,
transparency"). To ensure this, we will inform you about the individual
legal definitions that are also used in this privacy policy:
1. Personal Data
"Personal data" means any information
relating to an identified or identifiable natural person (hereinafter referred
to as the "data subject") which is considered identifiable by a
natural person who can be identified directly or indirectly, in particular by
associasuring an identifier such as a name, an identification number, location
data, an online identifier or one or more specific characteristics, the
expression of the physical, physiological, genetic, psychological, cultural or social
identity.
2. Processing
"Processing" means any operation, with
or without the help of automated procedures, performed, or any such series of
operations relating to personal data such as the collection, collection,
organisation, ordering, storage, adaptation or modification, reading, querying,
use, disclosure by transmission, dissemination or any other form of provision,
matching or linking, restriction, deletion or destruction.
3. Restriction of Processing
"Restriction of processing" is the
marking of stored personal data with the aim of restricting their future
processing.
4. Profiling
"Profiling" means any form of automated
processing of personal data that consists in the use of such personal data to
evaluate certain personal aspects relating to a natural person, in particular
to analyse or predict aspects relating to work performance, economic situation,
health, personal preferences, interests, reliability, behaviour, whereabouts or
relocation of that natural person.
5. Pseudonymization
'pseudonymisation' means the processing of
personal data in such a way that the personal data can no longer be assigned to
a specific data subject without the use of additional information, provided
that such additional information is kept separately and is subject to technical
and organisational measures to ensure that the personal data cannot be assigned
to an identified or identifiable natural person.
6. File System
'file system' means any structured collection of
personal data accessible according to certain criteria, whether that collection
is central, decentralised or managed in a functional or geographical manner.
7. Responsible Person
'responsible person' means a natural or legal
person, authority, body or other body which decides, alone or jointly with
others, on the purposes and means of the processing of personal data; where the
purposes and means of such processing are determined by Union law or the law of
the Member States, the controller or the specific criteria of his designation
may be provided for in accordance with Union or Member State law.
8. Contract Processors
'processor' means a natural or legal person,
authority, body or other body which processes personal data on behalf of the
controller.
9. Recipient
'recipient' means a natural or legal person, authority,
body or other body to which personal data is disclosed, whether or not it is a
third party. However, authorities which may receive personal data under Union
or Member State law under a particular investigative mission shall not be
deemed to be recipients; the processing of such data by the said authorities
shall be carried out in accordance with the applicable data protection rules in
accordance with the purposes of the processing.
10. Third Party
'third party' means a natural or legal person, authority,
body or other body, other than the data subject, the controller, the processor
and the persons authorised to process the personal data under the direct
responsibility of the controller or processor.
11. CONSENT
A "consent" of the data subject shall
be any voluntary expression of intent in the form of a declaration or other
unambiguous affirmative act in the form of a statement or other unambiguous
affirmative act in which the data subject indicates that he or she agrees to
the processing of the personal data concerning him or her.
Processing
The processing of personal data is lawful only if
there is a legal basis for the processing. The legal basis for processing may
be in particular in accordance with Article 6 (1) lit. a – f GDPR:
1. The data subject has given his or her consent
to the processing of personal data concerning him or her for one or more
specific purposes;
2. the processing is necessary for the
performance of a contract to which the data subject is a party or for the
implementation of pre-contractual measures carried out at the request of the
data subject;
3. the processing is necessary to fulfil a legal
obligation to which the controller is subject;
4. processing is necessary to protect the vital
interests of the data subject or any other natural person;
5. processing is necessary for the performance of
a task which is in the public interest or in the exercise of official authority
delegated to the controller;
6. the processing is necessary to safeguard the
legitimate interests of the controller or a third party, unless the interests
or fundamental rights and freedoms of the data subject, which require the
protection of personal data, prevail, in particular where the data subject is a
child.
Information on the
Collection of Personal Data
(1) In the following we inform about the
collection of personal data when using our website. Personal data include e.B.
name, address, e-mail addresses, user behavior.
(2) When contacting us by e-mail or via the
contact form, the data you provide (your e-mail address, if applicable) will be
your name and phone number) stored by us to answer your questions. We delete
the data generated in this connection after the storage is no longer necessary,
or the processing is restricted if legal retention obligations exist.
Collection of personal data
when you visit our website
When
using the website in an informative way, i.e. if you do not register or
otherwise provide us with information, we only collect the personal data that
your browser transmits to our server. If you wish to view our website, we
collect the following data, which is technically necessary for us to display
our website and to ensure stability and security (legal basis is Art. 6 sec. 1
p.1 lit. f GDPR):
1.
IP address
2. Date and time of the request
3. Time zone difference to Greenwich Mean Time (GMT)
4. Content of the request (concrete page)
5. Access status/HTTP status code
6. Amount of data transferred in each case
7. Website from which the request comes
8. Browser
9. Operating system and its interface
10. Language and version of the browser software.
Use of cookies
(1) In addition to the aforementioned data,
cookies are stored on your computer when using our website. Cookies are small
text files that are stored on your hard drive as associated with the browser
you are using and through which certain information flows to the place that
sets the cookie. Cookies cannot run programs or transmit viruses to your
computer. They are used to make the Internet offer more user-friendly and
effective overall.
(2) This website uses the following types of
cookies, the scope and functioning of which are explained below:
·
Transient cookies
·
Persistent cookies
1. Transient cookies are automatically deleted
when you close the browser. This includes, in particular, session cookies.
These store a so-called session ID, which can be used to assign various
requests from your browser to the common session. This allows your computer to
be recognized when you return to our website. Session cookies are deleted when
you log out or close the browser.
2. Persistent cookies are automatically deleted
after a predetermined duration, which may vary depending on the cookie. You can
delete the cookies in your browser's security settings at any time.
3. You can configure your browser settings according
to your wishes and, for example.B refuse to accept third-party cookies or all
cookies. So-called "Third Party Cookies" are cookies that have been
set by a third party, therefore not by the actual website on which you are
currently located. Please note that by disabling cookies, you may not be able
to use all the functions of this website.
Other features of our website
(1) In addition to the purely informative use of
our website, we offer various services that you can use if you are interested.
To do so, you usually need to provide additional personal data that we use to
provide the respective service and to which the aforementioned data processing
principles apply.
(2) In some cases, we use external service
providers to process your data. These have been carefully selected and
commissioned by us, are bound by our instructions and are regularly checked.
(3) Furthermore, we may share your personal data
with third parties if promotions, sweepstakes, contracts or similar services
are offered by us together with partners. For more information, please contact
us when you provide your personal data or in the description of the offer
below.
(4) Insofar as our service providers or partners
are based in a country outside the European Economic Area (EEA), we will inform
you of the consequences of this circumstance in the description of the offer.
Children
Our offer is aimed at adults. Persons under the
age of 18 should not provide us with any personal data without the consent of
their parents or legal guardians.
Your Rights
(1) Revocation of consent
If the processing of the personal data is based
on a given consent, you have the right to revoke the consent at any time. The
revocation of consent does not affect the legality of the processing carried
out on the basis of the consent until the revocation.
For the exercise of the right of withdrawal, you
can contact us at any time.
(2) Right to confirmation
You have the right to request confirmation from
the controller as to whether we are processing personal data concerning them.
You can request confirmation at any time using the above contact details.
(3) Information right
If personal data is processed, you can request
information about these personal data and the following information at any
time:
1. the processing purposes;
2. the categories of personal data that are
processed;
3. the recipients or categories of recipients to
whom the personal data have been or are still being disclosed, in particular
for recipients in third countries or international organisations;
4. where possible, the planned duration for which
the personal data will be stored or, if this is not possible, the criteria for
determining that duration;
5. the existence of a right to rectification or
erasure of personal data concerning you or to restrict the processing by the
controller or a right to object to such processing;
6. the existence of a right of appeal to a
supervisory authority;
7. if the personal data are not collected from the
data subject, all available information on the origin of the data;
8. the existence of automated decision-making,
including profiling in accordance with Article 22(1) and (4) GDPR and, at least
in such cases, meaningful information on the logic involved and the scope and
intended impact of such processing on the data subject.
If personal data is transferred to a third
country or to an international organisation, you have the right to be informed
of the appropriate safeguards under Article 46 GDPR in connection with the
transfer. We provide a copy of the personal data that is the subject of the
processing. For all other copies that you request person, we may charge a
reasonable fee based on the administrative costs. If you submit the application
electronically, the information shall be made available in a standard
electronic format, unless otherwise stated. The right to receive a copy referred
to in paragraph 3 shall not affect the rights and freedoms of other persons.
(4) Right to correction
You have the right to request from us without
delay the correction of any inaccurate personal data concerning you. Taking
into account the purposes of the processing, you have the right to request the
completion of incomplete personal data, including by means of a supplementary
declaration.
(5) Right to be deleted
("right to be forgotten")
You have the right to require the controller to
immediately delete personal data concerning you, and we are obliged to delete
personal data immediately if one of the following reasons applies:
1. The personal data are no longer necessary for the
purposes for which they were collected or otherwise processed.
2. The data subject shall withdraw his consent on
which the processing referred to in Article 6 (1) (a) or Article 9 (2) (a) GDPR
was based and there is no other legal basis for processing.
3. The data subject shall object to the processing
in accordance with Article 21 (1) GDPR and there are no legitimate priority
reasons for the processing or the data subject shall object to the processing
in accordance with Article 21 (2) GDPR.
4. The personal data were processed unlawfully.
5. The erasure of personal data is necessary to fulfil
a legal obligation under Union law or the law of the Member States to which the
controller is subject.
6. The personal data have been collected in relation
to information society services offered in accordance with Article 8(1) GDPR.
Where the controller has made the personal data
public and is obliged to delete it in accordance with paragraph 1, he shall
take appropriate measures, including technical measures, taking into account
the available technology and implementation costs, to inform data controllers
who process the personal data that a data subject has requested from them the
deletion of all links to such personal data or copies or replicas of that
personal data.
The right to erasure ("right to be
forgotten") does not exist to the extent that the processing is necessary:
- the exercise of the right to freedom of
expression and information;
- to fulfil a legal obligation requiring
processing under the law of the Union or the Member States to which the
controller is subject, or to carry out a task which is in the public interest
or in the exercise of official authority delegated to the controller,
- for reasons of public interest in the field of
public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3)
GDPR,
- for archival purposes in the public interest,
for scientific or historical research purposes or for statistical purposes in
accordance with Article 89 (1) GDPR, to the extent that the law referred to in
paragraph 1 is likely to make the achievement of the objectives of such processing
impossible or seriously impairs the achievement of the objectives of such
processing, or
- to assert, exercise or defend legal claims.
(6) Right to restriction of processing
You have the right to request from us to restrict
the processing of your personal data if one of the following conditions is met:
1. the accuracy of the personal data is disputed by
the data subject for a period of time that enables the controller to verify the
accuracy of the personal data;
2. the processing is unlawful and the data subject
refuses to delete the personal data and instead demands the restriction of the
use of the personal data;
3. the controller no longer needs the personal data
for the purposes of the processing, but the data subject needs it to assert,
exercise or defend legal claims, or
4. the data subject has objected to the processing
in accordance with Article 21(1) GDPR until it is established whether the
legitimate reasons of the controller outweigh those of the data subject.
Where the processing has been restricted in
accordance with the above conditions, such personal data shall be processed,
with the exception of its storage, only with the consent of the data subject or
for the assertion, exercise or defence of legal claims or for the protection of
the rights of another natural or legal person or for reasons of an important
public interest of the Union or a Member State.
In order to exercise the right to restrict
processing, the data subject may contact us at any time using the contact
details given above.
(7) Right to data portability
You have the right to receive the personal data
concerning you that you have provided to us in a structured, common and
machine-readable format, and you have the right to transfer this data to
another controller without hindrance by the controller to whom the personal
data was provided, provided that:
1. the processing is based on consent in accordance
with Article 6 (1) (a) or Article 9 (2) (a) or on a contract in accordance with
Article 6 (1) (b) GDPR, and
2. processing is carried out using automated
procedures.
When exercising the right to data portability in
accordance with paragraph 1, you have the right to obtain that the personal
data be transferred directly from one controller to another controller, insofar
as this is technically feasible. The exercise of the right to data portability
does not affect the right to erasure ("right to be forgotten"). This
right shall not apply to processing necessary for the performance of a task
which is in the public interest or in the exercise of official authority
delegated to the controller.
(8) Right to object
You have the right, for reasons arising from your
particular situation, to object at any time to the processing of personal data
concerning you under Article 6 paragraph 1 (e) or (f GDPR); this also applies
to profiling based on these provisions. The controller no longer processes the
personal data, unless he can prove compelling legitimate grounds for the
processing, which outweigh the interests, rights and freedoms of the data
subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for direct
marketing purposes, you have the right to object at any time to the processing
of personal data concerning you for the purpose of such advertising; this also
applies to profiling in so far as it is related to such direct marketing. If
you object to the processing for direct marketing purposes, the personal data
will no longer be processed for these purposes.
In the context of the use of information society
services, you may exercise your right of objection by means of automated
procedures using technical specifications, notwithstanding Directive
2002/58/EC.
You have the right to object, for reasons arising
from your particular situation, against the processing of personal data
concerning you for scientific or historical research purposes or for
statistical purposes in accordance with Article 89(1), unless the processing is
necessary for the performance of a task in the public interest.
You can exercise the right of objection at any
time by contacting the respective controller.
(9) Automated decisions including profiling
You have the right not to be subject to a
decision based solely on automated processing, including profiling, that has
legal effect against you or similarly significantly affects you. This does not
apply if the decision:
1. necessary for the conclusion or performance of a
contract between the data subject and the controller,
2. is permitted by Union or Member State legislation
to which the controller is subject and that legislation contains appropriate
measures to safeguard the rights and freedoms and legitimate interests of the
data subject, or
3. with the express consent of the data subject.
The controller shall take appropriate measures to
safeguard the rights and freedoms and legitimate interests of the data subject,
including at least the right to the intervention of a person on the part of the
controller, to express his or her point of view and to challenge the decision.
The data subject may exercise this right at any
time by contacting the person responsible.
(10) Right to complain to a supervisory authority
They shall also have the right to lodge a
complaint with a supervisory authority, in particular in the Member State of
their place of residence, place of work or place of alleged infringement,
without prejudice to any other administrative or judicial remedy, where the
data subject considers that the processing of personal data concerning him or
her is contrary to this Regulation.
(11) Right to effective judicial remedy
Without prejudice to an available administrative
or extrajudicial remedy, including the right to appeal to a supervisory
authority under Article
77 GDPR, they shall have
the right to an effective judicial remedy if they consider that the rights to
which they are entitled under this
Regulation have been infringed as a result of processing of their personal data
in breach of this Regulation.
Use of Google Analytics
(1) This website uses Google Analytics, a web
analytics service provided by Google Inc. ("Google"). Google
Analytics uses so-called "cookies", text files that are stored on
your computer and which enable an analysis of your use of the website. The
information generated by the cookie about your use of this website is usually
transmitted to a Google server in the USA and stored there. However, if IP
anonymisation is activated on this website, your IP address will be truncated
by Google within Member States of the European Union or in other contracting
states of the Agreement on the European Economic Area. Only in exceptional
cases will the full IP address be transmitted to a Google server in the USA and
truncated there. On behalf of the operator of this website, Google will use
this information for the purpose of evaluating your use of the website,
comcompile reports on website activity and provide other services relating to
website activity and internet usage to the website operator.
(2) The IP address transmitted by your browser
within the scope of Google Analytics will not be merged with other data from
Google.
(3) You can prevent the storage of cookies by
setting your browser software accordingly; however, we would like to point out
that in this case you may not be able to use all functions of this website to
the full extent. You can also prevent the collection of data generated by the
cookie and related to your use of the website (including your IP address) to
Google and the processing of this data by Google by downloading and installing
the browser plug-in available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.
(4) This website uses Google Analytics with the
extension "_anonymizeIp()". As a result, IP addresses are processed
in a truncated manner, which can be used to exclude personal data. Insofar as
the data collected about you is subject to a personal reference, this is
immediately excluded and the personal data is deleted immediately.
(5) We use Google Analytics to analyze and
regularly improve the use of our website. Through the statistics obtained, we
can improve our offer and make it more interesting for you as a user. In
exceptional cases where personal data is transferred to the USA, Google has
submitted to the EU-US Privacy Shield,
https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of
Google Analytics is Art.6sec.1p.1 lit. f GDPR.
(6) Third-party information: Google Dublin,
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353
(1) 436 1001.
http://www.google.com/analytics/terms/de.html,
privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html,
and the privacy policy: http://www.google.de/intl/de/policies/privacy.
(7) This website also uses Google Analytics for a
cross-device analysis of visitor flows, which is carried out via a user ID. You
can disable the cross-device analysis of your usage in your customer account
under "My Data", "Personal Data".
Use of social media plugins
(1) We are currently using the following social
media plug-ins: [Facebook, Twitter and LinkedIn]. We use the so-called
two-click solution. This means that when you visit our site, no personal data
will be passed on to the providers of the plug-ins. You can recognize the
provider of the plug-in by marking it on the box via its initial letter or
logo. We offer you the possibility to communicate directly with the provider of
the plug-in via the button. Only if you click on the selected field and
activate it, the plug-in provider will receive the information that you have accessed
the corresponding website of our online offer. In addition, the data referred
to in Section 3 of this declaration will be transmitted. In the case of
Facebook, according to the respective providers in Germany, the IP address will
be anonymized immediately after collection. By activating the plug-in, personal
data is transmitted by you to the respective plug-in provider and stored there
(at US providers in the USA). Since the plug-in provider collects data,
especially via cookies, we recommend that you delete all cookies before
clicking on the grayed-out box via the security settings of your browser.
(2) We have no influence on the data collected
and data processing processes, nor are we aware of the full extent of the data
collection, the purposes of the processing, the storage periods. We also do not
have any information about the deletion of the collected data by the plug-in
provider.
(3) The plug-in provider stores the data
collected about you as user profiles and uses them for the purposes of advertising,
market research and/or the design of its website according to requirements.
Such an evaluation is carried out in particular (even for non-logged-in users)
in order to display demand-based advertising and to inform other users of the
social network about your activities on our website. You have the right to
object to the creation of these user profiles, whereby you must contact the
respective plug-in provider in order to exercise this. Through the plug-ins, we
offer you the opportunity to interact with social networks and other users, so
that we can improve our offer and make it more interesting for you as a user.
The legal basis for the use of the plug-ins is Art. 6 sec. 1 p. 1 lit. f GDPR.
(4) The data is passed on regardless of whether
you have an account with the plug-in provider and are logged in there. If you
are logged in to the plug-in provider, your data collected by us will be
assigned directly to your existing account with the plug-in provider. If you
press the activated button and link to the page .B, the plug-in provider also
stores this information in your user account and communicates it publicly to
your contacts. We recommend that you log out regularly after using a social
network, especially before activating the button, as this will allow you to
avoid being assigned to your profile with the plug-in provider.
(5) Further information on the purpose and scope
of the data collection and its processing by the plug-in provider can be found
in the data protection declarations of these providers communicated below.
There you will also find more information about your rights in this regard and
settings options to protect your privacy.
(6) Addresses of the respective plug-in providers
and URL with their privacy notices:
1. Facebook Inc., 1601 S California Ave, Palo
Alto, California 94304, USA; http://www.facebook.com/policy.php; more
information on data collection: http://www.facebook.com/help/186325668085084,
http://www.facebook.com/about/privacy/your-info-on-other#applications and
http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has
submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
2. Twitter, Inc., 1355 Market St, Suite 900, San
Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has
submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
3. LinkedIn Ireland Unlimited Company, Wilton
Place, Dublin 2, Irland, https://www.linkedin.com/legal/privacy-policy
Use of the Facebook Pixel and the Twitter Pixel
(1) The Facebook pixel and the Twitter pixel are
used on this website. The basis is the legitimate interest in optimization,
analysis, and economic operation of our offer.
(2) The operator of the Facebook pixel is the
social network Facebook, which is operated by Facebook Inc., 1 Hacker Way,
Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland
Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. (3) The
operator of the Twitter pixel is the social network Twitter, which is operated
by the Twitter International Company Attn: Privacy Policy Inquiry, One
Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND.
https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).
(5) The Facebook pixel enables Facebook, the
Twitter pixel allows Twitter to identify the visitors to our website as the
target group for the display of ads (Facebook ads, Twitter ads). Accordingly,
we use the Facebook pixel to display the Facebook ads we send only to those
Facebook users who have also shown an interest in our online offer or who have
certain characteristics that we transmit to Facebook (so-called "Custom
Audiences"). With the help of the Pixels, we also want to ensure that our
ads meet the potential interest of users and do not have a harassing effect.
With the help of the Pixels, we can also understand the effectiveness of the
advertisements for statistical and market research purposes, in which we can
see whether users have been redirected to our website (conversion) after
clicking on an ad.
(6) The processing of the data by Facebook takes
place within the framework of Facebook's data usage policy. General information
on the display of ads in Facebook's data usage policy:https://www.facebook.com/policy.php. For specific information and details about the
Facebook pixel and how it works, see the help section:https://www.facebook.com/business/help/651294705016616.
(7) The processing of the data by Twitter takes
place within the framework of Twitter Data Use Policy. General information on
the display of ads in Twitter's data usage policy:
https://twitter.com/de/privacy. For specific information and details about the
Twitter pixel and how it works, see the Help section:
https://business.twitter.com/en/help/campaign-measurement-and-analytics/pixel-helper.html
(8) You may object to the collection by the
Facebook pixel and use of your data to display advertisements. You can follow
the instructions on the Facebook-set page for what types of ads you see on
Facebook:https://www.facebook.com/settings?tab=ads. The settings are platform-independent, i.e.
they are applied to all devices, such as desktop computers or mobile devices.
(9) You may also object to the use of cookies for
range measurement and advertising purposes via the deactivation page of the
Network Advertising Initiative (http://optout.networkadvertising.org/) and additionally the US website (http://www.aboutads.info/choices) or the Europeanwebsite (http://www.youronlinechoices.com/uk/your-ad-choices/).
Newsletter
(1) With your consent, you can subscribe to our
newsletter, with which we inform you about our current interesting offers. The
advertised goods and services are specified in the declaration of consent.
(2) For the registration to our newsletter we use
the so-called double opt-in procedure. This means that after you have
registered, we will send you an e-mail to the e-mail address provided, in which
we ask you to confirm that you wish to receive the newsletter. If you do not
confirm your registration within 24 hours, your information will be blocked and
automatically deleted after one month. In addition, we store your IP addresses
and times of registration and confirmation. The purpose of the procedure is to
prove your registration and, if necessary, to clarify possible misuse of your
personal data.
(3) The only requirement for sending the
newsletter is your e-mail address. The provision of further, separately marked
data is voluntary and will be used to address you personally. After your
confirmation, we will save your e-mail address for the purpose of sending the
newsletter. The legal basis is Art. 6 sec. 1 p. 1 lit. a GDPR.
(4) You can revoke your consent to the sending of
the newsletter at any time and unsubscribe from the newsletter. You can declare
the revocation by clicking on the link provided in each newsletter e-mail, by
e-mail to privacy@printess.com or by sending a message to the contact details
given in the imprint.
(5) We would like to point out that we evaluate
your user behaviour when sending the newsletter. For this evaluation, the
e-mails sent include so-called web beacons or tracking pixels, which represent
one-pixel image files that are stored on our website. For the evaluations, we
link the above-mentioned data and the web beacons with your e-mail address and
an individual ID. The data is collected exclusively pseudonymously, so the IDs
are not linked to your other personal data, a direct personal data is excluded.
You can object to this tracking at any time by clicking on the separate link
provided in each email or by informing us via another contact route. The
information will be stored as long as you subscribe to the newsletter. After
unsubscribing, we store the data purely statistically and anonymously.
(6) We use an external service provider to send
newsletters. Separate order data processing has been concluded with the service
provider to ensure the protection of your personal data. We are currently
working with the following service providers:
Use and use of Google Fonts
(1) This internal page uses Google Fonts, a
service for the provision of fonts, which make it possible to implement an
individual design on internet pages.
(2) The operator of the services of Google
AdWords is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351,
USA. Further information and the applicable data protection regulations of
Google can be found here: Privacy Policy:
https://www.google.com/policies/privacy/, Opt-Out:
https://adssettings.google.com/authenticated.
Use of our service
(1) If you wish to order on our website, it is
necessary for the conclusion of the contract that you submit your personal data, which we need for the processing of your order.
Mandatory information required for the execution of the contracts is marked
separately, further information is voluntary. We process the data you provide
for the processing of your order. For this purpose, we can pass on your payment
data to our bank. The legal basis for this is Art. 6 sec. 1 p. 1 lit.b GDPR.
You can voluntarily create a customer account through which we can store your
data for later purchases. When you create an account under "My
Account", the data you provide will be stored revocably. All other data,
including your user account, can always be deleted in the customer area
(2) Due to commercial and tax regulations, we are
obliged to store your address, payment and order data for a period of ten
years. However, after two years, we will restrict processing, i.e. Your data
will only be used to comply with legal obligations.
(3) In order to prevent unauthorized access by
third parties to your personal data, in particular financial data, the ordering
process is encrypted using TLS technology.
(4) Upon completion of the order, we collect the
following data: name, e-mail, country and address, and, if applicable, the
following data. Credit card information or other means of payment via an
external payment service provider. We do not store any payment
methods on our server.
Use of external payment services
We offer several payment methods for the use of
the webshop and use different payment service managers. Depending on which
payment method you choose, different data will be transmitted to the respective
payment service provider. The legal basis for the transmission is Art. 6 sec. 1
p.1 lit. a GDPR. In the following we list our payment service providers:
https://www.paypal.com
Pipedrive
We use the CRM system of the provider Pipedrive
OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, for the better processing of user requests. In order to process the requests, at
least one e-mail address is required. For more information, see Pipedrive's
privacy policy: https://www.pipedrive.com/en/privacy
Atlassian
Atlassian Corporation Plc , 341 George Street,
Sydney, NSW, Australia, offers various enterprise software to make the
collaboration within the company more structured. The products used are
Atlassian Jira, a process management tool, Atlassian Confluence, collaboration
software and Jira service desk for customer service. At least the customer's
e-mail address is required to help them with problems. For the processing of
the tickets, the software is then used by Atlassian Jira & also the
communication runs via Atlassian. For more information, see Atlassian's Privacy
Policy:https://www.atlassian.com/legal/privacy-policy.
Printess Backend
As soon as the customer registers with us or
registers, the customer's data required for billing will be sent to our backend.
These are the company name, email address, subscription ID, and billing
information. Here, if necessary, a direct
exchange with the Third Party PayPal. Furthermore, designed documents, necessary
images, fonts and other resources
as well as all billing-relevant data are stored when using the editor and the API. For the cancellation terms and
conditions, please read our General Terms and Conditions for the Service.