Privacy Policy

 

Welcome to our website! The protection of your data and privacy is of great importance to us. With this document, we would like to explain which data we process, how we process it, for what purpose and on what legal basis. This document outlines how our services work and how we gurantee the protection of your personal data.

According to Art. 4 paragraph 1 of the EU GDPR (General Data Protection Rules), personal data is all information relating to an identified or identifiable natural person. An identifiable person is a natural person who can be identified directly or indirectly. Further information on this can be found  in Art. 4 paragraph 1 EU GDPR.

This data protection declaration can be viewed, saved and printed out at any time at https://www.animod.com/c/privacy

 

If we state our legitimate interest or a legitimate interest of a third party (Art. 6 paragraph 1 letter f) EU GDPR) as the legal basis for the processing of your personal data, you have a right of objection pursuant to Art. 21 EU GDPR:

According to Art. 21 EU GDPR, you have the right to object to the processing of your personal data at any time. We will not process your personal data after an objection, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims (cf. for example Art. 21 Paragraph 1 EU GDPR, so-called "restricted right of objection"). In this case, you must explain the reasons for the opposition that arise from your particular situation.

You may also object to the processing of your personal data for reasons arising from your particular situation, for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 paragraph 1 EU GDPR, unless the processing is necessary to fulfill a task in the public interest (see Art. 21 paragraph 6 EU GDPR).

 

We will also point out the right of objection separately in the individual sections (e.g. by stating: "You have a right of objection"), provided that this right exists. There you will also find further information on how to exercise your right of objection.

In order to keep the following data protection declaration clear, we refer to information and data protection notices on external websites (refer to section "Social Networks & External Links" in this data protection declaration) at various points by use of links. We make every effort to keep the links listed in this data protection declaration up to date. Nevertheless, due to the constant updating of the websites, it is possible that that links may not function correctly. In the event that a link does not work, please do notify us immediately so that we can take remedial measures.

 

1) Responsible person

The person responsible for the processing of personal data within the meaning of Art. 4 paragraph 7 EU GDPR:

Animod GmbH
Bayenthalgürtel 4
50968 Cologne

Phone: 0221 93374100
Fax: 0221 93374374
E-Mail: info@animod.de

 

2) Contact for data protection

If you have any questions regarding the processing of your personal data or your rights relating to data protection, please contact us:

Animod GmbH
- Data Protection Officer -
Bayenthalgürtel 4
50968 Cologne

Phone: 0221 93374100
Fax: 0221 93374374
E-mail: datenschutz@animod.de

 

3) Log files

Every time you visit our website, we automatically collect data and information from your device's system and store it in server log files. This data is information that refers to an identified or identifiable natural person (here: website visitor). This data is automatically transferred by your browser when you visit our website and includes the following information:       

The purpose of this processing is to make our website accessible from your device and to enable our website to be displayed correctly on your device or in your browser. Furthermore, the data enables us to optimize our website and to ensure the security of our systems. This data is not evaluated for marketing purposes.

The legal basis for processing is Art. 6 paragraph 1 lit. f) EU GDPR. We have a legitimate interest in presenting you a website optimized for your browser and in enabling you to communicate between our server and your device. The latter requires in particular the processing of your IP address.

The data will be stored with us for 14 days.

The recipient of the data is our server host (Google Cloud). Google maintains many data centers in Europe, but it cannot be excluded that data will also be transferred to a Non-EU country (e.g. the USA). Google works for us as a contract processor. In particular, we have entered into an order processing agreement and a contract with Google in accordance with the standard contractual clauses. Google also has a Privacy Shield certification (see section "Information about Google services").

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

 

4) Cookies

Our website uses cookies. Cookies are text files that are stored on your device, e.g. to make the use of a website more comfortable or to recognize the user's device and to save settings. Cookies can store entries and settings on a website so that you do not have to re-enter them each time you visit a website. Cookies contain a  cookie ID, which makes it possible to assign the device in which the cookie was stored. In particular, we use cookies which contain a randomly generated, concrete identification number which makes you or your device identifiable on our website. These cookies are used to store the customer ID, family name, given name, e-mail, login token and the profile picture URL (if any). These cookies are stored for different periods of time, as listed below. These cookies remember different states of use or are used for allocation to sales channels, e.g.

The purpose of processing this data is to make your use of our website comfortable and to offer you the possibility to save settings.

The legal basis for processing is Art. 6 paragraph 1 lit. f) EU GDPR. We have a legitimate interest in presenting you with a website that stores your personal settings and facilitates your visit to our website.

 

RIGHT TO OBJECT

You have the right to object. You can restrict or completely prevent the setting of cookies in your browser settings. You can also have cookies deleted automatically when you close your browser window. Here you can learn how to delete cookies in the most common browsers and change the cookie settings:

Google Chrome: website

Mozilla Firefox: website

Apple Safari: website

Microsoft Internet Explorer: website

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

Other services we work with also use cookies. Please refer separately to the use of cookies for the individual services.

 

5) Information about Google services

We use various services of Google Inc. on our website. "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

You will find more detailed information on the individual specific Google services that we use on this website in the further data protection declaration.

By integrating the Google services, Google may collect and process information (including personal data). It cannot be ruled out that Google may also transfer the information to a server in a Non-EU country.

As can be seen from Google's Privacy Shield certification (found at https://www.privacyshield.gov/list under the search term "Google"), Google is committed to the EU-US Privacy Shield Framework and the      Swiss-US Privacy Shield Framework for the collection, use and storage of personal data from the member states of the EU and Switzerland. Google, including Google LLC and its wholly owned subsidiaries in the United States, has declared by certification that it complies with the Privacy Shield Principles. For more information, please visit https://www.google.de/policies/privacy/frameworks/.

We ourselves cannot influence which data Google actually collects and processes. However, Google states that the following information (including personal data) may in principle be processed:

If you're signed in to your Google Account, Google may add the processed information to your account and treat it as personal information, depending on your account settings, including https://www.google.de/policies/privacy/partners/.

Among other things, Google explains the following:

"We may combine personal information from one service with information and personal data from other Google services. This makes it easier for you to share content with friends and acquaintances, for example. Depending on your account settings, your activities on other websites and in apps may be linked to your personal information in order to improve Google's and Google's advertising services". (https://www.google.com/intl/de/policies/privacy/index.html)

You can prevent this information from being added directly by logging out of your Google Account or by using the appropriate account settings in your Google Account. You can also change your cookie settings (e.g. delete cookies, block cookies, etc.). For more information, see "4) Cookies".

Further information can be found in Google's privacy policy, which you can access here: https://www.google.com/policies/privacy/      

To learn more about Google's privacy settings, please visit https://privacy.google.com/take-control.html

 

6) Use of Google Analytics

We use Google Analytics, a web analysis service of Google Inc. "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies", which are text files placed on your device, to help the website you visit analyze how users use the site. Google Analytics may also use so-called web beacons (invisible graphics). These web beacons can be used to evaluate information such as visitor traffic on websites. The information generated by cookies and web beacons about the use of our website (including the IP address of users) is transmitted to a Google server, possibly in the USA or other non EUcountries, and stored there. This information may be passed on by Google to Google's contractual partners.

Information on Google's existing Privacy Shield certification and other relevant data for data processing by Google in connection with the use of the Google services can be found in this data protection declaration under "5) Information on Google services".

Google processes the following types of data:

This website uses the "demographic features" function of Google Analytics. This allows reports to be created that contain information on the age, gender and interests of site visitors. This data comes from interest-related advertising by Google and from visitor data from third-party providers. This data cannot be assigned to a specific person. You can disable this feature at any time from your Google Account ad preferences or opt-out of Google Analytics collecting your information as described in the "Opt-out" section below.

In addition, you will find further detailed information on the information processed at https://www.google.com/intl/de/policies/privacy/#infocollect under "Data that we receive as a result of your use of our services" and at https://privacy.google.com/businesses/adsservices/ .

We only use Google Analytics with activated IP anonymization ("anonymous IP"). This will reduce your IP address from Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Furthermore, we have concluded an order processing agreement with Google for the use of Google Analytics (Art. 28 EU GDPR). Google processes the data on our behalf in order to evaluate your use of the website, to compile reports on website activities for us and to provide us with further services relating to website and Internet use. Google may transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google.

The integration of Google Analytics enables us to analyse user behaviour on our website and to react to it. This enables us to continuously improve our services.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit. f) EU GDPR. Our justified interest in this is the great benefit that the functions described above have for our offer. The statistical evaluation of user behaviour enables us in particular to react and optimise our offer.

Google is entitled to engage subcontractors for the processing of orders. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/

RIGHT TO OBJECT

You have the right to object. You can prevent Google from processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

You can also prevent the collection by Google Analytics by clicking on the following link. An opt-out cookie is set to prevent future collection of your data when you visit this website: Disable Google Analytics

You can also change your cookie settings (e.g. delete cookies, block cookies, etc.). For more information, see "4) Cookies".

The processed information is stored for 14 months and automatically deleted after this retention period has expired.

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

 

7) Use of Google Maps

We use Google Maps on our website. Google Maps is a service of Google Inc. "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The Google-Maps plug-in is integrated by embedding the service on our website using an "iFrame". When loading this iFrame, Google may collect and process information (including personal data). It cannot be excluded that Google may also transfer the information to a server in a Non-EU country.

Information on Google's existing Privacy Shield certification and other relevant data for data processing by Google in connection with the use of the Google services can be found in this data protection declaration under "5) Information on Google services".

Our integrated maps from Google Maps contain a preview image, so that at first no contact to the servers of Google is established. Only when you click on this picture, the server will be contacted by Google Maps. We do not collect any data ourselves if you use Google Maps via our website.

By the integration of Google Maps we pursue the purpose to be able to represent to you the address of the hotel as well as to make further information available for your journey. This integration of Google Maps also allows us to present locations to you, whereby you are not limited to individual map sections and can independently research distances.

The legal basis for the processing of personal data described above is Art. 6 paragraph 1 lit. f) EU GDPR. Our legitimate interest in this is the great benefit that Google Maps offers. Due to the integration we do not have to show the directions to the respective locations on the basis of maps. Instead, we make it possible for each user to plan his own route. Google also has a legitimate interest in the (personal) data collected in order to improve its own services.

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

8) Use of Google reCAPTCHA

This website uses Google reCAPTCHA (following reCAPTCHA), a captcha service of Google Inc. "("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google reCAPTCHA serves to ensure that entries made on our website are actually made by real people and not automatically, e.g. by software (so-called robots).

For this purpose reCAPTCHA shows you a clickable checkbox "I am not a robot". If necessary, after clicking the checkbox, various images are also displayed, which you must assign to a predefined image motif by clicking on the relevant images (e.g. selection of all images with cars).

The integration of reCAPTCHA takes place via an interface ("API") to the Google services. By integrating reCAPTCHA, Google may collect and process information (including personal data). It cannot be ruled out that Google may also transfer the information to a server in a Non-EU country.

reCAPTCHA uses so-called "cookies", text files which are stored on your device and which enable an analysis of the use of the websites you have visited. In addition, reCAPTCHA also uses so-called WebBeacons, i.e. small pixels or graphics. The information generated by the cookie in connection with the WebBeacon about your use of this website (including your IP address) will be transmitted to and stored by Google on servers, possibly in the United States or other Non-EU countries.

Information on Google's existing Privacy Shield certification and other relevant data for data processing by Google in connection with the use of the Google services can be found in this data protection declaration under "5) Information on Google services".

For more information on how reCAPTCHA works, see:

https://developers.google.com/recaptcha/

Through the integration of reCAPTCHA we pursue the purpose of determining whether entries on our website are made by a real person or by a bot.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit. f) EU GDPR. Our justified interest required for this lies in the great benefit which the function (described above) has for our offer. Automated checking to see whether a real person or a bot is making the entries speeds up and simplifies our workload and increases the degree of reliability of the entries made. It also prevents misuse. Google also has a legitimate interest in the (personal) data collected in order to improve its own services.

RIGHT TO OBJECT

You have the right to object. You can change your cookie settings (e.g. delete cookies, block cookies, etc.). For more information, see "4) Cookies".

The processed information is only stored for as long as is necessary for the intended purpose.

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

9) Use of YouTube

We use videos from YouTube and YouTube plug-ins on our website. YouTube is a service provided by YouTube LLC ("YouTube"), 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc. ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

YouTube is integrated by embedding the service on our website using an "iFrame". When loading this iFrame, YouTube or Google may collect and process information (including personal data). It cannot be ruled out that YouTube or Google may also transfer the information to a server in a Non-EU country.

Information on Google's existing Privacy Shield certification and other relevant data for data processing by Google in connection with the use of the Google services can be found in this data protection declaration under "5) Information on Google services".

We do not collect any data ourselves when you watch a YouTube video on our site.

The integration of YouTube enables us to present you various videos on our website so that you can watch them directly on our website.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit. f) EU GDPR. Our legitimate interest in this lies in the great benefit that YouTube offers. By integrating external videos we relieve our servers and can use freed up resources for other purposes. Among other things, this can increase the stability of our servers. YouTube or Google also has a legitimate interest in the (personal) data collected in order to improve its own services.

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide this information may mean that you may not be able to use our website or may not be able to use it in full.

 

10) Newsletter

You have the possibility to subscribe to our newsletter on our website.

To send the newsletter we use the newsletter service provider MailChimp. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. MailChimp is a service with which the dispatch of newsletters can be organized and analyzed.

If you enter data for the purpose of newsletter subscription (in particular e-mail address), these are stored on the servers of MailChimp in the USA.

As can be seen from the privacy shield certification of "The Rocket Science Group LLC" (MailChimp) (available at https://www.privacyshield.gov/list under the search term "MailChimp"), MailChimp has committed itself to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework published by the US Department of Commerce on the collection, use and storage of personal data from EU and Swiss member states. The Rocket Science Group LLC (MailChimp) has declared by certification that it complies with the Privacy Shield Principles.

Furthermore, we have concluded a data processing agreement with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process the data exclusively in accordance with the data protection regulations on our behalf and in accordance with our instructions. Further information can be found at: https://mailchimp.com/legal/privacy/

When you register for our newsletter, we process the following information (including personal data) from you:

In order to be able to reproduce the proof of consent and cancellation in a legally compliant manner, we hold the following data on the events of registration, amendment, confirmation and cancellation of the newsletter for each user profile generated with an e-mail address confirmed by the double opt-in procedure:

In addition, we process the following information (including personal data) about you as part of your use of our newsletter:

The data will be processed by us, MailChimp and subcontractors of MailChimp within the scope of data processing. Subcontractors process the data as bound by instructions from Mailchimp on their behalf and our behalf.

With the help of the service MailChimp we analyze the success and the reach of our newsletter campaigns. We evaluate for example  if and when you open a newsletter, which products you choose in the newsletter (clicked on) and, if this results in a purchase, that information is also  transferred to MailChimp.

For this purpose MailChimp uses cookies and web beacons to enable statistical surveys and to build interest profiles. It is possible for us to understand how you react to individual newsletters from us (e.g. whether you have opened the newsletter).

By registering for the newsletter you agree to receive our newsletter, whereby we secure the registration by a double opt-in procedure:

In the first step, you enter the required data (e.g. e-mail address). In a second step, you will automatically receive an e-mail with a confirmation or activation link, which you should also confirm or activate. This is how we ensure that the e-mail address entered on our website belongs to you.

The purpose of collecting and processing the user's e-mail address is to be able to send the newsletter. The collection and processing of further personal data as part of the registration process is intended to prevent misuse of our newsletter and your e-mail address. In addition, the processing described above serves to enable us to prove that we have been given your consent.

The purpose of processing the cookie and measurement data is to track the success and reach of our newsletters.

The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 paragraph 1 lit. f) EU GDPR. We have a legitimate interest in being able to prove the consent you have given. Furthermore, we have a legitimate interest in preventing or proving misuse of our newsletter. Finally, we have a legitimate interest in tracking the success of our newsletter. The statistical evaluation of user behaviour enables us in particular to react and optimise our offer in line with our interests.

RIGHT TO OBJECT

You have the right to object. You can object to receiving the newsletter at any time, e.g. by clicking on the link provided for this purpose in our newsletter. You can also send us your objection at any time (e.g. by e-mail to datenschutz@animod.de). You can also change your cookie settings (e.g. delete cookies, block cookies, etc.). For more information, see "4) Cookies".

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Your registration data will only be stored as long as your subscription to the newsletter is active and your profile is not deleted. The tracking and cookie data will be deleted after 30 days. If you do not confirm the e-mail in the double opt-in process, your registration will be automatically deleted after 30 days.

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. Non-provision would, however, mean that we cannot provide you with a newsletter.

 

11) Registration

You have the possibility to create a user account for our shop. In particular, the following data is included as mandatory information:

You can also add further data as voluntary data. The following data is potentially affected:

Mandatory data and voluntary data are treated equally by us. The mandatory data is necessary to create a user account for you to place orders later. The following data is also processed when the message is sent:

After registration we will send you an e-mail with a link for the double opt-in procedure. This will activate your account. The date of this activation is also saved.

The purpose of the processing of personal data within the scope of mandatory data and voluntary data is to provide you with a user account that you can later use for purchases from us. Furthermore, you can view your purchases in your user account.

The other personal data processed during the sending of the registration (IP address, date and time of sending) serve to prevent misuse and to document the knowledge of our data protection information.

The legal basis for processing is our legitimate interest pursuant to Art. 6 paragraph 1 lit. f) EU GDPR. We have a legitimate interest in providing you with a user account to make our service more convenient and to make shopping with us more convenient for you. Furthermore, we have a legitimate interest in preventing or proving misuse of our registration function. Finally, we have a legitimate interest in recording the information on data protection.

The processed data will only be stored for as long as this is necessary for the intended purpose or required by law. The data provided in the registration form will only be processed for as long as it is necessary to provide the functions.

The additional personal data (IP address and date) collected during the submission of the form will be deleted after 14 days at the latest.

The recipient of the data is our server host (Google Cloud). Google maintains many data centers in Europe, but it cannot be excluded that data will also be transferred to a third country (e.g. the USA). Google works for us as a contract processor. In particular, we have entered into an order processing agreement and a contract with Google in accordance with the standard contractual clauses. Google also has Privacy Shield certification (see section "6) Information about Google services").

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to provide you with a user account may prevent us from providing it to you.

 

12) Order

You have the possibility to place an order on our website in our online shop. In the context of an order in our online shop, the following data in particular will be processed (depending on the mode of dispatch):

The data can also be found in the respective order or input form.

The purpose of processing personal data is to process the order and to fulfill the contract.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit b) EU GDPR.

In addition, we also process your IP address and the date and time of your order in order to be able to check the data in case of suspicion of misuse.

The legal basis for this is Art. 6 paragraph 1 lit f) EU GDPR. We have a justified interest to recognize abusive orders in our online shop and to be able to take necessary measures.

The data processed by us in the context of contract processing can be transmitted to the commissioned transport company, insofar as this is necessary for the fulfillment of the contract and/or be transmitted to the commissioned credit institution and/or to the payment service provider, insofar as this is necessary for processing the order and/or to the respective provider (hotel or tour operator), as far as this is necessary for the fulfillment of the contract.

In addition, our server host (Google Cloud) is the recipient of the data. Google maintains many data centers in Europe, but it cannot be excluded that data will also be transferred to a non-EU country (e.g. the USA). Google works for us as a contract processor. In particular, we have entered into an order processing agreement and a contract with Google in accordance with the standard contractual clauses. Google also has Privacy Shield certification (see section "6) Information about Google services").

We have to consider the legal storage obligations. We are then obliged to keep certain documents for up to 10 years. As soon as the contract has been completely processed, the contract data is blocked and deleted after the deadline has expired. The legal basis for this is Art. 6 paragraph 1 lit. c) EU GDPR.

Further data (in particular IP address) will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. The data will be deleted after 30 days.

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract. However, it is necessary in order to place an order in our online shop. You are not obliged to provide personal data. Non-provisioning would mean, however, that you cannot place an order with us.

 

13) System messages

We use the provider "SparkPost" for our system messages of our shop or our website as e-mail provider. SparkPost is a service of Message Systems, Inc. (dba SparkPost), 9160 Guilford Rd., Columbia, Maryland 21046.

The corresponding system messages and information contained therein are stored on SparkPost servers in the USA. Other or further e-mail communication with us is not affected by this (cf. "26) Contact").

As can be seen from the Privacy Shield certification of Message Systems, Inc. (SparkPost) (available at https://www.privacyshield.gov/list under the search term "SparkPost"), SparkPost has committed to comply with the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework published by the US Department of Commerce on the collection, use and storage of personal data from EU and Swiss member states. The Message Systems, Inc. (SparkPost) has declared by certification that it complies with the Privacy Shield Principles.

Furthermore, we have concluded a data processing agreement with SparkPost. This is a contract in which SparkPost undertakes to protect the data and to process it exclusively in accordance with data protection regulations on our behalf and in accordance with our instructions. For more information, please visit https://www.sparkpost.com/policies/dpa/

The purpose of the processing of the data processed during communication is to be able to send automatic messages for predefined events in our shop or on our website.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit. f) EU GDPR. Our legitimate interest is to be able to send automatic system messages for the same or similar events in order to optimize our response time and to keep the personnel costs for such processes low.

The personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

The data will be processed by us, SparkPost and subcontractors of SparkPost within the scope of data processing. Subcontractors process the data as instructed by SparkPost on behalf of itself and on our behalf.

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to make this information available may mean that you will not be able to contact us or that we will not be able to get in touch with you.

 

14) Payment via PayPal

You have the possibility to pay with PayPal.  Upon completion of your order you will be redirected to the website of the payment provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal"). When paying via PayPal, information (including personal data) is transmitted by us to PayPal for the purpose of payment processing and processed by PayPal. When paying via PayPal, the following data in particular will be transmitted by us to PayPal:

When you visit the PayPal website or PayPal services, PayPal places cookies on your device. Among other things, PayPal uses these cookies to recognize you as a customer, to personalize PayPal services, content and advertising, to evaluate the effectiveness of advertising and to ensure the security of your account. You may refuse the use of cookies by selecting the appropriate settings on your browser, provided that these cookies are not required to prevent fraud or to ensure the security of the websites administered by PayPal. However, we would like to point out that in this case you may not be able to use all the functions of PayPal.

PayPal's current privacy policy can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

The purpose of data processing is to process the payment process and the contract.

The legal basis for processing the data within the framework of the ordering process and contract execution is Art. 6 paragraph 1 lit. b) EU GDPR. The data will only be stored by us for as long as this is necessary for the implementation and processing of your order and fulfillment of the legal retention periods.

The provision of personal data is required for the conclusion of a contract. Failure to provide the data would result in the contract not being concluded.

 

15) Payment - Klarna (Sofort)

We offer you the possibility to pay your order via the service Klarna (also known as "Sofort"). Klarna is an online payment service provider that offers you, among other things, the possibility to pay online immediately using your bank details. The provider of Klarna is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm Sweden, phone: 0046 8-120 120 00, fax: 0046 8-120 120 99, contact: info@klarna.de. In Germany you can contact Sofort GmbH, Theresienhöhe 12, 80339 Munich.

Upon completion of the order you will be redirected to the website of the payment service provider Klarna. We transmit the purchased item (as part of the payment reference), the order reference, internal order ID, the amount and the URLs to cancel and forward after payment to Klarna. You will be asked to enter your account number, your online banking PIN and a corresponding TAN of your bank. If you confirm this procedure, Klarna will check your account balance and whether your account covers the amount to be transferred (account coverage check) and any transfers with immediate effect from your account within the last 30 days have been successfully executed. Subsequently, if the check is positive, the order is sent to your bank in electronic form and the payment recipient you have selected (online provider) is informed of the successful suspension of the transfer. Klarna processes your account number, your online account PIN, the TAN entered and the data displayed on the transfer form and forwards them to your bank.

As part of the confirmation of the successful completion of the transfer order from Klarna we will receive immediately the data displayed in the transfer form (name, account number, bank code, subject, transfer amount) as well as the date (with time) and the transaction ID selected by the online provider (e.g. order number). In addition, the confirmation to us also contains BIC and IBAN if it concerns SEPA credit transfers or - depending on your bank - BIC and IBAN are required for setting up the transfer in your online banking account.

When you access the Klarna website or its service, Klarna places cookies and tokens on your device. Klarna uses the preferred user language, the sender country, the last selected bank interface as well as the e-mail address requested for transaction confirmations in order to have it available   when Klarna is used again. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we would like to point out that in this case you may not be able to use all the functions of Klarna.

Information on how Klarna works can be found under the following link:

https://www.klarna.com/sofort/

Detailed information on data protection at Klarna can be found under the following link

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

The purpose of data processing is to process the payment process and to execute the contract.

The legal basis for processing is Art. 6 paragraph 1 lit. b) EU GDPR. The data will only be stored by us for as long as this is necessary for the implementation and processing of your order and fulfillment of the legal retention periods.

The data processed by us within the framework of contract processing can be transmitted to the commissioned transport company insofar as this is necessary for the fulfillment of the contract. Your payment data can be transmitted to the commissioned credit institution if this is necessary for processing the payment. In addition, the data will be processed by our server host within the framework of order processing in accordance with our instructions.

Furthermore we have to consider the legal storage obligations. Accordingly, we are obliged to keep certain documents (in particular § 257 HGB, § 147 AO, §§ 14, 14b UstG) for up to 10 years. As soon as the contract has been completely processed, the contract data is therefore blocked and deleted after the deadline has expired. The legal basis for this is Art. 6 paragraph 1 lit. c) EU GDPR.

The provision of personal data is required for the conclusion of a contract. Failure to provide the data would result in the contract not being concluded.

 

16) Payment - paydirect

We offer you the possibility to pay your order via the service paydirekt. The service provider is paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. To use the service, you must first register with paydirekt ("subscriber").

With the payment you will be redirected to the website of paydirekt upon completion of the order. We transmit the purchased article (as part of the payment reference), the order reference, internal order ID, the amount and the URLs to cancel and forward after payment to paydirekt. A description of the processing of your data by paydirekt as part of the payment process can be found at https://www.paydirekt.de/agb/index.html, in particular under point 2.

After a successful transaction the following data will be transmitted to us by paydirekt:

When you access the paydirekt website or the service, paydirekt states that it stores cookies and tokens on your device in order to make offers user-friendly, effective and secure. Paydirekt also uses analysis tools to regularly improve the service and to correct errors. For more information, please visit https://www.paydirekt.de/agb/index.html. There you can set webtracking cookies through paydirekt also through a corresponding opt-out.

The purpose of processing the data by us is to process the payment process and to execute the contract.

The legal basis for processing is Art. 6 paragraph 1 lit. b) EU GDPR. The data will only be stored by us for as long as this is necessary for the implementation and processing of your order and fulfillment of the legal retention periods.

The provision of personal data is required for the conclusion of a contract. Failure to provide the data would result in the contract not being concluded.

 

17) Credit card payment (PAYMILL)

You have the possibility to pay by credit card. Payment is handled by the provider "PAYMILL". PAYMILL is offered in Germany by PAYMILL GmbH, St.-Martin-Straße 63, 81669 Munich.

By integrating PAYMILL, we are able to offer you payment by credit card. The payment is processed directly by PAYMILL. PAYMILL complies with the PCI DSS, the Payment Card Industry Data Security Standard.  PCI-DSS is an information security standard developed by the major credit card companies (American Express, Discover, JCB, MasterCard and Visa) to improve controls over credit card data handling and reduce fraud. All PAYMILL websites continue to use HTTPS with 256-bit encryption and the SSL certificates from PAYMILL use keys with a length of 4096 bits (refer https://www.paymill.com/de/sicherheit/).

The purpose of the processing of the data within the payment process is to assess your application, to draw up and execute the contract and to process your payment.

The legal basis for processing is Art. 6 paragraph 1 lit. b) EU GDPR.

PAYMILL automatically checks whether a transaction can be executed. Should PAYMILL come to the conclusion that a transaction is not possible, the payment cannot be completed and the order process is cancelled.

If the transaction is successful, we will receive the payment directly from the correspondent bank; your payment data will not be transmitted to us. We only receive a payment token from PAYMILL, which, however, does not allow any conclusion to your credit card data.

The provision of personal data is required for the conclusion of a contract. Failure to provide the data would mean that the contract cannot be concluded.

 

18) Contact form

On our website there is a contact form, which you can use for electronic contact. If you contact us via this contact form, the data entered in the input fields will be processed by us.

The following data are mandatory:

You can also add further data as voluntary data. This may simplify and speed up the processing of your request. The following data is potentially affected:

Mandatory data and voluntary data are treated equally by us. The mandatory data are necessary to get in contact with you and to process your request.

The purpose of the processing of personal data within the scope of mandatory data and voluntary data is to process the contact request and to be able to contact the inquirer in order to answer the request.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit. f) EU GDPR. It is our legitimate interest to offer you the opportunity to contact us at any time so that we can answer your questions.

The data provided will only be stored for as long as this is necessary for the intended purpose or required by law.

The recipient of the data is our server host (Google Cloud). Google maintains many data centers in Europe, but it cannot be excluded that data will also be transferred to a Non-EU country (e.g. the USA). Google works for us as a contract processor. In particular, we have entered into an order processing agreement and a contract with Google in accordance with the standard contractual clauses. Google also has Privacy Shield certification (see section "5) Information about Google services").

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, if you do not provide this information, you may not be able to use our contact form.

 

19) Contact us

You can contact us by post, telephone, fax or e-mail.

If you contact us by post, we can in particular process your address data (e.g. surname, given name, street, place of residence, postcode), date and time of receipt of the post as well as the data resulting from your letter itself.

If you contact us by telephone, we can in particular process your telephone number and, if necessary, your name, your e-mail address, the time of the call and details of your request during the call.

If you contact us by fax, we can process in particular the fax number or the sender identification as well as the data resulting from the fax.

When contacting us by e-mail, your e-mail address, the time of the e-mail as well as the data resulting from the message text (if necessary also attachments) will be processed.

The recipient of the data in the context of contacting us by e-mail is our e-mail provider (Google). Google maintains many data centers in Europe, but it cannot be excluded that data will also be transferred to a Non-EU country (e.g. the USA). Google works for us as a contract processor. In particular, we have entered into an order processing agreement and a contract with Google in accordance with the standard contractual clauses. Google also has Privacy Shield certification (see section "5) Information about Google services").

The purpose of processing the above data is to process the contact request and to be able to contact the inquirer in order to answer the request.

The legal basis for the processing of personal data described here is Art. 6 paragraph 1 lit. f) EU GDPR. It is our legitimate interest to offer you the opportunity to contact us at any time and to answer your questions.

The personal data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected.

RIGHT TO OBJECT

You have the right to object. You can send us your objection at any time (e.g. by e-mail to datenschutz@animod.de).

The provision of personal data is neither required by law nor by contract and is not required for the conclusion of a contract. You are also not obliged to provide personal data. However, failure to make this information available may mean that you will not be able to contact us or that we will not be able to get in touch with you.


20) Social Networks & External Links

In addition to this website, we also maintain presences in various social media, which you can access via corresponding buttons on our website. With some buttons you can perform certain actions on the social media platforms (e.g. to “like” our website or similar). We have integrated the social media buttons displayed by us via the so-called "Shariff solution". Shariff serves to make the integration of social media buttons more data protection friendly. For websites without Shariff, the social media buttons are usually directly integrated into the website (so-called iFrames). As a result, data may already be transferred to the respective provider (e.g. Google, Facebook etc.) when the website is loaded. This may also be the case if the user of the website has no account at all with these services. By integrating the social media buttons via Shariff, automatic data transfer when loading the page is prevented, since the respective social media button must first be "activated". A contact between the visited website and the respective social media provider is only established when the user of the website actively clicks on the share button.

If you visit such a presence, personal data may be transmitted to the provider of the social network. It is possible that in addition to storing the data you have specifically entered in this social network, other information may also be processed by the social network provider.

If you are logged in with your personal user account of the respective network while visiting such a website, this network can assign the visit to this account.

The purpose and scope of the data collection by the respective medium as well as the further processing of your data there and your rights in this regard can be found in the respective regulations of the respective responsible person, e.g. under:

Facebook: https://de-de.facebook.com/about/privacy/

Twitter: https://twitter.com/de/privacy

Transcript by http://www.addic7ed.com/

Google: https://policies.google.com/privacy?hl=en

We also point out that our website contains further links to external third-party websites, whereby we have no influence on the processing of data on third-party websites.

 

21) Data security

We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. Despite regular checks, however, complete protection against all risks is not possible.

 

22) Modification of the data protection declaration

Changes in the law or in our internal processes may make it necessary to adapt this data protection declaration.

In case such an event occurs and any changes are made, a notification above the heading “Privacy Policy” will inform you about it.

 

23) Revocation

You have the right to revoke consent once given with effect for the future at any time without this affecting the legality of the processing that has taken place on the basis of the consent until revocation.

 

24) Rights of the persons concerned

 

For inquiries of this kind, please contact datenschutz@animod.de. Please note that we must ensure that it is indeed the affected person.

They shall have the right of appeal to a data protection supervisory authority, without prejudice to any other administrative or judicial remedy.

Automated decision making does not take place on our website.

26.06.2018

Blog preview
We use cookies to provide you with the best service possible. You can find more information in our data privacy policy.