Privacy Policy of HACHEZ CHOCOVERSUM GmbH

The use of our website is possible without providing personal data. Where personal data (for example name, address or E-Mail addresses) on our sides  is concerned, this always takes place, when possible, on a voluntary basis. This data will not be disclosed to third parties without your consent. Please note that data transmission over the Internet (e.g. communication via e-mail) may have security issues.

I.              Information about the collection of personal data

(1)   In the following we inform about the collection of personal data when using our website. Personal data is all data that are personally identifiable to you, e.g. name, address, e-mail addresses and user behaviour.

 

(2)   The person responsible pursuant to Article 4 (7) of the EU General Data Protection Regulation (GDPR) is

HACHEZ CHOCOVERSUM GmbH

Messberg 1, 20095 Hamburg

Tel.: (040) 41 91 23 00

Fax: (040) 41 91 23 0 - 20

E-Mail: info@CHOCOVERSUM.de

(see our imprint).

 

You can contact our data protection officer at:

Lawyer Bertold Frick

Datenschutz-Metropol GmbH

Baumwollbörse, Wachtstraße 17/24, 28195 Bremen

Tel.: (0421) 339 53 50

Fax: (0421) 339 53 55

E-Mail: frick@trinity-metropol.de

 

(3)   When you contact us by e-mail, the information you provide (your e-mail address, if applicable your name and telephone number) will be stored by us to answer your questions. We delete the data that arise in this context after the storage is no longer required, or limit the processing if statutory storage obligations exist.

 

(4)   If we rely on commissioned service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective transactions below. In doing so, we also specify the specified criteria for the storage duration.

 

II.             Your rights

(1)   You have the following rights with respect to your personal data:

 

·         to request information, pursuant to Art. 15 GDPR, about your personal data processed by us. In particular, you may request information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or objection, and the existence of a right to appeal, the origin of their data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about their details;

·         to demand the correction, pursuant to Art. 16 GDPR, of incorrect or complete personal data stored by us without delay;

·         to demand the deletion, pursuant to Art. 17 GDPR, of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

·         to demand the restriction, pursuant to  Art. 18 GDPR, of the processing of your personal data if you dispute the accuracy of the data or if the processing is unlawful but you refuse to delete the data and we no longer need the data, but if you need it to assert, exercise or defend legal claims or if you have objected to the processing in accordance with Art. 21 GDPR;

·         to receive, pursuant to Art. 20 GDPR, your personal data provided to us in a structured, conventional and machine-readable format or to request the transfer to another person in charge and

·         to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or work or the registered office of our company.

To assert your rights, please contact: frick@trinity-metropol.de

(2)   If you wish to complain to the data protection  supervisory authority for our company’s registered office about our processing of your, please contact:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit

Klosterwall 6 (Block C), 20095 Hamburg

Tel.: (040) 4 28 54 - 40 40

E-fax: (040) 4 279 - 11811

E-Mail: mailbox@datenschutz.hamburg.de

 

III.           Collection of personal data when visiting our website

(1)   When only using the website for information purpose, i.e. if you do not register or otherwise provide us with information, we will only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website and to ensure stability and security (legal basis is Art. 6 (1) sentence 1 (f) GDPR):

 

·         IP address

·         Date and time of the request

·         Time zone difference to Greenwich Mean Time (GMT)

·         Content of the request (specific page)

·         Access Status/HTTP status code

·         The amount of data transferred in each case

·         Website from which the request comes

·         Browser

·         Operating system and its interface

·         Language and version of the browser software.

 

 

IV.           Data security

(1)   We secure our website and other systems by technical and organisational measures against loss, destruction, access, modification or distribution of your data by unauthorised persons. Despite regular checks, full protection against all risks is not possible. The site uses industry standard SSL (Secure Sockets Layer) for encryption in some places. This ensures the confidentiality of your personal data over the Internet.

 

V.            Social plugins

(2)   This website uses social plugins from social networks. Separate privacy and liability rules apply to social networks, and in general to third-party websites. The storage and use of personal data by the respective site operator (service provider), which occur when using its services, may exceed the scope of this privacy policy. CHOCOVERSUM has no influence on which data an activated plugin detects and how they are used by the provider. CHOCOVERSUM does not collect any personal data by means of the social plugins or their use.

 

(3)   In order to increase the protection of your data, the plugins are not unrestricted, but only integrated into the site using an HTML link (so-called "shariff solution" from c't). This integration ensures that when you visit the site that contains such plugins, no connection is established with the servers of the provider of the respective social network. Clicking on one of the buttons opens a new window of your browser and calls up the page of the respective service provider on which you can (if applicable, after entering your login data), for example press the Like or Share button. For the purpose and scope of the data collection and the further processing and use of the data by the providers on their sites and their rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of the provider.

Facebook

Operator: Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA

Website: https://www.facebook.com

Privacy: http://www.facebook.com/policy.php

 

Google+

Operator: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

Website: http://www.google.com/intl/en/+/learnmore/

Privacy: http://www.google.com/intl/en/+/policy/+1button.html

 

Instagram

Operator: Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025, United States

Website: https://www.instagram.com

Privacy Policy: https://help.instagram.com/155833707900388

 

TripAdvisor

Operator: TripAdvisor LLC, 400 1st Avenue, Needham, MA 02494 United States

Website: https://www.tripadvisor.de

Privacy Policy: https://tripadvisor.mediaroom.com/DE-privacy-policy

 

 

 

VI.           Google Analytics and Cookies

(1)   This website uses Google Analytics, a web analytics service provided by Google Inc. (hereafter "Google"). Google Analytics uses cookies. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and that provide certain information to the body that sets the cookie. Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet offer more user-friendly and effective overall and thus have their legal basis in our justified interest under Art. 6 (1) sentence 1 (g) GDPR.

 

(2)   The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and stored there. On our website, we use IP anonymisation, which means your IP address will be reduced by Google within member states of the European Union or in other contracting states to the agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google is committed to complying with the US Department of Commerce's Privacy Shield Agreement between the EU and the US on the collection, use and storage of personal data from EU Member States and, accordingly, has a Privacy Shield Certificate.

 

(3)   On our behalf, Google uses this information to evaluate your use of our website, compile reports about website activity and provide other services related to website activity and internet usage to the website operator. The transmitted data can be used to create usage profiles of visitors to our website. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data.

 

(4)   The evaluation of the user behaviour of the website is based on the legitimate interests of the provider. By evaluating the anonymised usage data, the site is adapted and optimised to user behaviour.

 

(5)   You can prevent the storage of cookies by a corresponding setting of your browser software. You can also prevent Google from collecting data generated by the cookie and related to your use of the website and processing data by Google by downloading and installing the browser plugin, which you can find under the following link (https://tools.google.com/dlpage/gaoptout?hl=en). You can also prevent its use and processing by clicking on the following link. This will set an opt-out cookie that will prevent future collection of your data when you visit this website: <a href="javascript:gaOptout()"> Disable Google Analytics for this page </ a>.

 

(6)   The information obtained by the cookie about the use of this website will not be passed on  to third parties.

 

(7)   For more information regarding Google Analytics’ terms of service and privacy, please visit https://www.google.com/analytics/terms/en.html  or https://policies.google.com/?hl=en.

 

(8)   We would like to point out that on this website, Google Analytics has been extended by the code "anonymizeIp" to ensure an anonymous collection of IP addresses (so-called IP-Masking).

 

 

 

VII.          Newsletter

(1)   On our website you have the opportunity to subscribe to our newsletter. For this, we need your name as well as your e-mail address to send you the newsletter.

 

(2)   The legal basis for this is the consent (Article 6 (1) sentence 1 (a) GDPR). When registering for the newsletter, you agree to us sending a newsletter to your e-mail address. By registering, you agree to the following consent text:   

 

"I hereby agree that [name] may send me e-mails to the e-mail address specified by me. I have the right at any time to revoke this consent with effect for the future. I have read the privacy policy with further information on data processing. "

 

(3)   You can revoke this consent at any time in the future by unsubscribing from the newsletter. At the end of each Newsmail, you will find a link through which you can unsubscribe from the newsletter. Your entry will be deleted automatically.

 

(4)   Registration for our newsletter takes place in a so-called double opt-in procedure. In other words, you will receive an e-mail after logging in, requesting confirmation of your registration. As proof of the registration for the newsletter, the registration and confirmation times as well as the IP address are stored.

 

(5)   The statistical survey, analysis and logging of the registration procedure is based on legitimate interests (Article 6 (1) sentence 1 (f) GDPR). The legitimate interest here is the proper and technically flawless execution of the e-mail dispatch.

 

(6)   We only save the e-mail address you have provided when ordering the newsletter for as long as you have subscribed to the newsletter. As soon as you have unsubscribed from the newsletter, we will delete your e-mail address.

 

(7)   The Newsletter Software uses Clever Elements (http://cleverelements.com). Your data will be transmitted to Clever Elements GmbH. Clever Elements is prohibited from selling and using your data for any purpose other than sending newsletters. Clever Elements is a German, certified provider that has been selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.

 

(8)   In addition, we will not forward the e-mail address you provided us with to third parties.

 

VIII.        Waiting list

(1)   When you register for a "list of events", the information given here will be collected, stored, processed and used. The legal basis for this is the consent (Art. 6 (1) sentence 1 (a) GDPR). When you register on the waiting list, you consent to us sending an e-mail with information about your waiting list topic to your e-mail address.

 

(2)   As soon as the next information about your waiting list topic is available, you will receive an e-mail to the address you have specified. Your data will then be deleted.

 

(3)   You can revoke your consent to the storage of the data, the e-mail address and its use for sending the waiting list notification at any time by e-mail to info@chocoversum.de.

 

IX.           Offer forms - school classes and companies

On our website, we offer you the opportunity to register school classes or companies via an online form and to request a corresponding offer. When using these forms, please provide the name, e-mail and telephone number or, in the case of school classes, the telephone number of a chaperone (the processing of this data is based on Article 6 (1) (f) of the GDPR and serves our legitimate interests to provide you with further way to make specific contact and get a contact before an offer is submitted. The storage of this data is only to the extent necessary for the preparation of the offer and execution of the booked event.

X.            Google Maps

The website of CHOCOVERSUM has integrated the Google Maps service to visualise and display the contact address. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. During use, Google collects and processes data about the use of the map function by the user. For more information about data processing, see the Google Privacy Policy (https://policies.google.com/privacy?hl=en)

XI.           Advertising to us

The use of contact data published in the context of the imprint obligation by third parties for sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

As of May 2018