Privacy policy
Introduction
Thank you for your interest in Valkental GmbH (hereinafter "we", "us") and for visiting our website.
The following information provides you with an overview of the processing of your personal data on our website https://valkental.de (hereinafter "website").
We would also like to inform you about your rights under data protection laws. We always process your personal data in accordance with the General Data Protection Regulation (hereinafter "GDPR"), the Act on Data Protection and the Protection of Privacy in Telecommunications and Telemedia (hereinafter "TTDSG") and all applicable country-specific data protection regulations.
1 Responsibility
Responsible within the meaning of the GDPR is
Valkental GmbH
Rhine promenade 9
40789 Monheim on the Rhine
Germany
Phone 1: +49 1573 2630598
Phone 2: +49 1781 796561
E-mail: support@valkental.de
2 Data protection officer
You can reach our data protection officer as follows
Antonio Detering
Brucknerstrasse 12
47057 Duisburg
Phone: +49 157 89 553418
E-mail: a.detering@valkental.de
You can contact our data protection officer directly at any time with any questions or suggestions regarding data protection and the exercise of your rights.
3 Definition
This privacy policy is based on the terminology of the GDPR. To simplify matters, we would like to explain some important terms in this context in more detail:
- Personal data: Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Data subject: Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
- Processing: Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
- Recipient: A recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
- Third party: A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
- Consent: Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
4 Origin of the personal data
We may receive personal data in the following ways:
4.1 Information provided by you
You have the opportunity to provide information (e.g. contact details) about yourself on our website.
4.2 Automatically collected and generated data
When you use our website, data is automatically collected and generated.
4.3 Data collected by third parties
If we maintain a presence on social and professional networks, we may receive data from you via these networks (e.g. if you contact us via a social or professional network or respond to one of our contents shared there).
5 Scope, purpose, legal basis, storage period and, if applicable, recipients and third country transfer of the respective processing of personal data
5.1 General information
Below we provide you with an overview of which personal data we process. To this end, we explain to what extent, for what purposes and on what legal basis we process personal data.
We will not pass on your personal data to third parties without your consent, unless this is permitted by law (e.g. because this is necessary for the performance of the contract).
The processing of your personal data may be based in particular on the following legal bases:
- 6 para. 1, sentence 1 lit. a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing operation.
- If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Art. 6 para. 1 sentence 1 lit. b) GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures.
- If we are subject to a legal obligation which requires the processing of personal data, the processing is based on Art. 6 para. 1 sentence 1 lit. c) GDPR.
- Furthermore, processing operations may be based on Art. 6 para. 1 sentence 1 lit. f) GDPR. Processing operations are based on this legal basis if the processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.
5.2 Data transfers to third countries
Among other things, we use services from companies based in third countries (e.g. in the USA). If these services are active, it is possible that data may be transferred to a third country and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.
US companies are, for example, obliged to disclose data to authorities or similar institutions, without you as the data subject being able to appeal against this in accordance with our legal understanding. We have no influence on such data transfer.
5.3 Deletion of data
Unless a specific storage period is specified in this data protection notice, the data processed by us will be erased in accordance with the statutory provisions as soon as the consent permitted for processing is revoked or other permissions cease to apply (e.g. if the purpose for processing this data no longer applies or it is not required for the purpose). If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person.
5.4 Safety measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.
The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, safeguarding of availability and its separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.
5.5 Transmission of personal data
As part of our processing of personal data, the data may be transferred to other bodies, companies, legally independent organizational units or persons or disclosed to them. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.
5.6 Website in general
5.6.1 Provision of the website, server log files
5.6.1.1 Scope of processing
To provide our website, we use storage space, computing capacity and software that we rent from a corresponding server provider (web host). In addition, when you visit our website, data that your browser transmits to our server is automatically processed. This general data and information is stored in the log files of the server (in so-called "server log files"). The following can be recorded:
- Browser type and browser version
- Operating system used
- Referrer URL (previously visited website)
- Host name of the accessing computer
- Date and time of the server request
- IP address
5.6.1.2 Purpose of the processing
When using this data and information, we do not draw any conclusions about your person. The purposes we pursue include in particular
- Provision of our website
- Provision of our online offer and user-friendliness
- Operation and provision of information systems
- Content Delivery Network (CDN)
- Provision of contractual services
- Customer service
- Provision of e-mail communication
- Ensuring a smooth connection setup of the website
- Clarification of acts of abuse or fraud,
- Problem analysis in the network
- Evaluation of system security and stability.
5.6.1.3 Legal basis
The legal basis for data processing is our legitimate interest within the meaning of Art. 6 para. 1, sentence 1 lit. f) GDPR. We have a legitimate interest in being able to provide our website in a technically flawless manner.
5.6.1.4 Recipients of personal data
Your data will be passed on to service providers for hosting and content delivery networks (CDN) to the extent necessary as part of order processing:
- Cloudflare: Content Delivery Network (CDN) Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA; Privacy Policy: https://www.cloudflare.com/privacypolicy/; Use of cookies
- Shopify: Operation of the website, Shopify Inc, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, Privacy Policy: https://www.shopify.com/legal/privacy
5.6.2 Cookies
5.6.2.1 General information
We use cookies on our website.
These are text files that your browser automatically creates and that are stored on your IT system when you visit our website. Through cookies, certain information flows to the location that sets the cookie. By using cookies, it is not possible to execute programs or transfer viruses to your end device.
If you do not wish to use cookies, you can disable them in the settings.
When you visit our website or a sub-website for the first time and it contains cookies, a "cookie banner" is displayed. You can allow us to use non-essential cookies and also revoke this decision there.
From a legal perspective, a distinction must be made between necessary and non-necessary cookies.
5.6.2.2 Necessary cookies
We use necessary cookies. These are cookies that are technically necessary to provide all the functions of our website. The legal basis for data processing is our legitimate interest within the meaning of Art. 6 para. 1, sentence 1 lit. f) GDPR. We have an overriding legitimate interest in being able to offer our website in a technically flawless manner. The legal basis for the use of cookies vis-à-vis our contractual partners who make use of services contractually owed by us via our website is Art. 6 para. I lit. b) GDPR, the provision of our contractual services.
5.6.2.3 Non-essential cookies
We also use non-essential cookies (e.g. analysis and marketing cookies). These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offer. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The cookies are only set after you have given your consent via our "cookie banner".
5.6.2.4 Storage duration
A distinction is made between the following types of cookies with regard to the storage period:
- Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their end device (e.g. browser or mobile application).
- Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. If we do not provide users with explicit information on the type and storage duration of cookies (e.g. when obtaining consent), users should assume that cookies are permanent and that they can be stored for up to two years.
5.6.3 Our use of cookies
The following table explains which cookies we use on our website and why:
Category |
Cookie |
Provider |
Storage duration in days |
Necessary Necessary cookies are absolutely essential for the operation of our website(s) and applications. They enable, for example, the provision of the shopping cart. Without these cookies, we cannot offer the desired services. These cookies also serve security purposes. No consent is required. |
AWSALBTGCORS |
Amazon Web Services |
7 |
cart_currency |
Shopify |
14 |
|
cookieconsent_status |
osano |
365 |
|
__kla_id |
|
400 |
|
__kla_viewed |
|
unlimited |
|
_checkout_queue_chec kout_token |
|
1 |
|
_checkout_queue_toke n |
|
1 |
|
amazon-pay-connected Auth |
|
1 |
|
apay-session-set |
|
365 |
|
cart |
|
14 |
|
cart_ver |
|
14 |
|
checkout |
|
21 |
|
chrls_debug |
|
unlimited |
|
chrls_init_event |
|
unlimited |
|
csync |
|
366 |
|
dmc-12 |
|
366 |
|
dmc-12-r |
|
366 |
|
dynamic_checkout_sho wn_on_cart |
|
1 |
|
klaviyoOnsite |
|
unlimited |
|
locale_bar_accepted |
|
Session |
|
localization |
|
366 |
|
n4f60g07 |
|
unlimited |
|
pid |
|
397 |
|
po_visitor |
|
po_visitor |
|
pushowl_landing_page _url |
|
Session |
|
pushowl_landing_page _url_params |
|
Session |
|
pushowl_original_url _params |
|
unlimited |
|
pushowl_referrer |
|
Session |
|
pushowl_session_toke n |
|
Session |
|
pushowl_shopify_conf ig-1.5-1a5798d7-e339 -40db-b9dc-31a5b4fe2 ff2 |
|
Session |
|
pushowl_task_type |
|
Session |
|
pushowl_visitor_toke n |
|
unlimited |
|
reviewsIo_averageRat ing |
|
unlimited |
|
reviewsIo_reviewCoun t |
|
unlimited |
|
secure_customer_sig |
|
366 |
|
TriplePixel |
|
unlimited |
|
TriplePixelU |
|
unlimited |
|
tuuid |
|
365 |
|
__cf_bm |
CloudFlare |
1 |
|
_cmp_a |
Shopify CDN
|
1 |
|
_landing_page |
14 |
||
_orig_referrer |
14 |
||
_s |
1 |
||
_secure_session_id |
1 |
||
_shopify_s |
1 |
||
_shopify_sa_p |
1 |
||
_shopify_sa_t |
1 |
||
_shopify_y |
365 |
||
_y |
365 |
||
cart_sig |
14 |
||
cart_ts |
14 |
||
checkout_token |
366 |
||
TestIfCookieP |
397 |
||
tf_respondent_cc |
Typeform
|
183 |
|
attribution_user_id |
365 |
||
__paypal_storage__ |
PayPal
|
unlimited |
|
enforce_policy |
365 |
||
l7_az |
1 |
||
LANG |
1 |
||
nsid |
Session |
||
ts_c |
400 |
||
ts |
400 |
||
tsrce |
3 |
||
x-pp-s |
Session |
||
session-id-apay |
Amazon Payments
|
365 |
|
session-id-time |
365 |
||
session-id |
365 |
||
session-token |
365 |
||
Functional These are non-essential cookies. These cookies allow us to remember choices or changes you make with your consent |
_gcl_au |
|
90 |
bcookie |
|
365 |
|
bscookie |
365 |
||
lidc |
1 |
||
UserMatchHistory |
30 |
||
VISITOR_INFO1_LIVE |
YouTube
|
180 |
|
YSC |
Session |
||
Analysis These are non-essential cookies. These cookies collect information about how visitors use our website. We use this information with your consent to better understand the behavior of visitors to the website. |
_clck |
Microsoft Clarity
|
365 |
_clsk |
1 |
||
_cltk |
Session |
||
ANONCHK |
1 |
||
CLID |
365 |
||
SM |
Session |
||
_gaexp |
Google Analytics
|
88 |
|
_gid |
1 |
||
A3 |
Yahoo! Analytics
|
365 |
|
IDSYNC |
365 |
||
ln_or |
LinkedIn Analytics |
1 |
|
Marketing These cookies enable us, with your consent, to display advertising tailored to you and content from social media. |
_tt_enable_cookie |
TikTok
|
390 |
_ttp |
390 |
||
tt_appInfo |
Session |
||
tt_pageId |
Session |
||
tt_pixel_session_ind ex |
Session |
||
tt_sessionId |
Session |
||
AnalyticsSyncHistory |
LinkedIn widgets
|
30 |
|
li_gc |
180 |
||
8lcfmzhxc8d6_uid |
The Reach Group |
90 |
|
_fbp |
Facebook Pixel |
90 |
|
_rxuuid |
Rhythmone Beacon |
365 |
|
am-uid |
Admixer |
90 |
|
audience |
SpotX |
28 |
|
c |
Bidswitch |
365 |
|
C |
Adform |
31 |
|
cct |
AdScale |
363 |
|
CMID |
Index Exchange
|
365 |
|
CMPRO |
90 |
||
CMPS |
90 |
||
dc |
Between Digital |
365 |
|
eng_mt |
Taboola |
unlimited |
|
IDE |
DoubleClick |
390 |
|
jg2kf3qb0kis_uid |
NEORY |
90 |
|
KRTBCOOKIE_466 |
PubMatic |
90 |
|
MR |
Bing Ads |
7 |
|
mt_misc |
MediaMath |
30 |
|
MUID |
Bing Ads |
390 |
|
PugT |
PubMatic |
30 |
|
SRM_B |
Adform |
390 |
|
ss |
Between Digital |
365 |
|
test_cookie |
DoubleClick |
1 |
|
tu |
AdScale |
363 |
|
tuuid_lu |
Bidswitch |
365 |
|
u8x7eovwf3h6_uid |
NEORY |
90 |
|
uid |
Adform |
60 |
|
uids |
MedyaNet |
90 |
|
to |
Improve Digital
|
90 |
|
umeh |
90 |
||
UserID1 |
Adition |
90 |
|
ut |
Between Digita |
365 |
|
uu |
AdScale |
363 |
|
uuid |
MediaMath |
393 |
|
uuid2 |
AppNexus |
90 |
|
v930q3phzhqx_uid |
NEORY |
90 |
|
viewer_token |
LoopMe |
92 |
5.6.4 Cookie banner
5.6.4.1 Scope of processing
Our cookie banner informs you about the specific cookies we use. In addition, we give you the opportunity to decide whether you want to consent to the setting of non-essential cookies. Can be processed:
- Usage data (e.g. websites visited, time of access)
- Meta and communication data (e.g. IP address)
5.6.4.2 Purpose of the processing
We process your personal data for the following purposes:
- Informing the user about the cookies we use
- Enabling you to consent to cookies that are not technically necessary
5.6.4.3 Legal basis of the processing
The legal basis for the use of the cookie banner is Art. 6 para. 1, sentence 1 lit. f) GDPR. We have an overriding legitimate interest in using the cookie banner, which enables us to obtain the legally required consent for the use of non-essential cookies and to comply with our duty to provide information regarding cookies.
5.6.4.4 Storage duration
The cookie banner stores the preferences until you reset or customize them.
5.6.4.5 Recipients of personal data
Your data will be passed on to a service provider for cookie banners to the extent necessary as part of order processing:
- Osano: Consent-Tool, Osano Inc, 3800 N Lamar Blvd, Ste 200, Austin, TX 78756, Privacy Policy: https://www.osano.com/legal/privacy
5.7 Contact options
5.7.1 Scope of processing
You have the option of contacting us via e-mail or a contact form on our website.
We process the following personal data from you as part of contacting you and responding to your request:
- First and last name
- E-mail address
- Phone number
- Address data
- Date and time of the request
- IP address
- Order number
- Communication content
5.7.2 Purpose of the processing
We process your data to answer your request and other resulting matters.
5.7.3 Legal basis
If your request is related to pre-contractual measures or an existing contract with us, the legal basis is the fulfillment of the contract and the implementation of pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR.
If your request is made independently of pre-contractual measures or existing contracts with us, our overriding legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR constitute the legal basis. We have an overriding legitimate interest in offering visitors to our website an opportunity to contact us.
5.7.4 Storage duration
We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the case of contact inquiries, this is generally the case when it is clear from the circumstances that the specific matter in question has been conclusively dealt with.
5.7.5 Recipients of personal data
Your data will be passed on to a service provider to the extent necessary as part of order processing:
- Klaviyo: Mail dispatch, 225 Franklin St, Boston, MA 02110, USA, privacy policy: https://www.klaviyo.com/legal/privacy/privacy-notice
- United Domains: Mailserver, United Domains AG Gautinger Straße 10 82319 Starnberg; Privacy Policy: https://www.uniteddomains.de/unternehmen/datenschutz/
- Typeform: Contact form, Bac de Roda 163, Barcelona, Spain, Privacy policy: https://admin.typeform.com/to/dwk6gt
5.8 Webshop
5.8.1 Scope of processing
You have the option of ordering our products via our website. In order to carry out this process, we process your personal data. In particular, we process the following personal data:
- First and last name
- E-mail address
- Phone number
- Address
- Means of payment
- Billing address
- Communication content
5.8.2 Purpose of the processing
We process your data to process your order.
5.8.3 Legal basis
If your request is in connection with pre-contractual measures or an existing contract with us, the associated data processing operations are based on Art. 6 para. 1, sentence 1 lit. b) GDPR.
5.8.1 Recipients of personal data
Your data will be passed on to service providers to the extent necessary for the execution of the product order or activation as part of order processing:
- Shopify: Operation of the online store, Shopify Inc, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, Privacy Policy: https://www.shopify.com/legal/privacy
- Pushowl: Sending of web-based push notifications, Creatorbox Softwares Private Limited, No 39, 2nd Floor NGEF Lane, Suite no 909 Indiranagar First Stage Bangalore KA 560038 IN; Privacy Policy: https://pushowl.com/privacy
- AreViewsApp: customer reviews, Areviews Ltd, privacy policy: https://areviewsapp.com/privacy_policy
- Silyoapps: Goodies; Privacy policy: https://www.stilyoapps.info/privacy-policy
- Conversion bearer: Upsell App, AppHub LLC, 116 Huntington Ave, 15th Floor, Boston Massachusetts 02116 USA; Privacy Policy: https://www.apphub.com/privacy-policy
- Billbee Gesellschaft mit beschränkter Haftung, Auftragsabwicklung, Arolser Str. 10, 34477 Twistetal, Germany; Data protection: https://www.billbee.io/rechtliches/datenschutz
- SCA Logistik &Fullfillment GmbH: Warehousing, Logistics, Packing, Benzstraße 4 85084 Reichertshofen; Data protection: https://www.sca-muc.de/datenschutz/
5.9 Customer account
5.9.1 Scope of processing
You have the option of creating a customer account during the ordering process:
- First and last name
- E-mail address
5.9.2 Purpose of the processing
We process the data for the purpose of opening a customer account and to store your data for future orders on our website.
5.9.3 Legal basis
The legal basis for the creation of the customer account is your voluntary consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.
5.10 Payment in the webshop
5.10.1 Scope of processing
In our webshop, you have the option of paying in different ways. In order to carry out this process, we process your personal data. In particular, we process the following personal data:
- Means of payment
- Billing address
5.10.2 Purpose of the processing
We process your data to process your order.
5.10.3 Legal basis
If your request is in connection with pre-contractual measures or an existing contract with us, the associated data processing operations are based on Art. 6 para. 1, sentence 1 lit. b) GDPR.
5.10.4 Recipients of personal data
Your data will be passed on to service providers to the extent necessary to process the payment as part of order processing:
- PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg
- Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
- Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg
- Apple Distribution International, Hollyhill Industrial Estate, Hollyhill Cork, Ireland
- Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5
- Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
5.11 Newsletter
5.11.1 Scope of processing
If you would like to receive information about our new products and services, we can inform you via newsletter if you consent to receiving newsletters.
You can revoke your consent to receive our newsletter at any time by clicking on the unsubscribe link in emails or by sending an email to support@valkental.de or by post to the contact details given in the legal notice. Your personal data will then be removed from the mailing list.
Our newsletters contain so-called tracking links, which enable us to analyze the behavior of newsletter recipients. For example, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked on. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected through the tracking links is stored and evaluated by us in order to optimize the newsletter dispatch and to adapt the content of future newsletters even better to your interests.
We process the following personal data, among others, as part of sending the newsletter:
- E-mail address
- First and last name
- Organization
- Preferred language
- Metadata (e.g. device information, IP address, date and time of login)
- Interaction with the newsletter
5.11.2 Purpose of the processing
We process your personal data for the following purposes:
- Newsletter distribution: implementation of marketing measures
- Newsletter tracking: Measuring success
5.11.3 Legal basis
The legal basis for sending our newsletter is your consent in accordance with Art. 6 (1) (a). You can withdraw your consent at any time with effect for the future. The legal basis for newsletter tracking is our legitimate interest in finding out whether our newsletter meets your interests and expectations in accordance with Art. 6 para. 1 lit. f GDPR.
5.11.4 Recipients of personal data
Your data will be passed on to a service provider for newsletter dispatch to the extent necessary as part of order processing:
- Klaviyo: Mail dispatch, 225 Franklin St, Boston, MA 02110, USA, privacy policy: https://www.klaviyo.com/legal/privacy/privacy-notice
- United Domains: Mailserver, United Domains AG Gautinger Straße 10 82319 Starnberg; Privacy Policy: https://www.united-domains.de/unternehmen/datenschutz/
5.12 Customer relationship management system
5.12.1 Scope and purpose of processing
We use functions of a customer relationship management system ("CRM system") on this website. Among other things, the CRM system enables us to manage existing and potential customers and customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze and optimize our customer-related processes. Details on the functions of the CRM system we use can be found here:
This enables us to process the following data, among others:
- E-mail address
- First and last name
- Address
- IP address
- Phone number
5.12.2 Legal basis
The CRM is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time via our cookie banner.
5.12.3 Recipients of personal data
Your data will be passed on to a service provider for CRM systems to the extent necessary as part of order processing:
- Zendesk: Zendesk Inc., 1019 Market Street San Francisco, CA 94103; Privacy Policy: https://www.zendesk.de/company/agreements-and-terms/privacy-notice/
5.13 Google Tag Manager
5.13.1 Scope and purpose of processing
We use Google Tag Manager to control the use of code snippets ("tags"), such as tracking code on our website. Google Tag Manager enables us to quickly and easily exchange code on our website via a web interface without having to intervene in the source code.
Among other things, we process the following personal data through the Google Tag Manager:
- IP address
- Device data, such as operating system, browser version, screen resolution
5.13.2 Legal basis
The legal basis for the use of Google Tag Manager is your voluntary and revocable consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.
5.13.3 Storage duration
Personal data is anonymized by Google after 9 months, unless there is a legal obligation to retain it.
5.13.4 Recipients of personal data
Your data will be passed on to Google Ireland Ltd. to the extent necessary as part of order processing.
5.14 Web analysis
5.14.1 Scope and purpose of processing
This website uses functions with the help of which we analyze your user behavior in order to make decisions regarding product and marketing optimization based on the results. Among other things, the following personal data is processed:
- Time of the request
- IP addresses
- Online labeling
- Device identifiers
- Technical characteristics of users (e.g. browser type and version, device type, operating system)
- Measurement of user behavior (e.g. views of individual pages / content, views of content from different areas, session duration / dwell time, bounce rate)
- Use of individual functionalities of the website (e.g. search queries, downloads)
- eCommerce activity (e.g. products purchased, sales)
- Referral URL (the previously visited page)
5.14.2 Legal basis
The legal basis for the use of web analytics services is the voluntary and revocable consent given by you in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.
5.14.3 Storage duration
Personal data will be anonymized by Google, among others, 14 months after your last activity, unless there are legal obligations to retain it.
5.14.4 Recipients of personal data
Your data will be passed on to the following providers to the extent necessary as part of order processing:
- Google Analytics: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
- Clarity: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; Privacy Policy: https://docs.microsoft.com/en-us/clarity/faq
- LinkedIn Analytics: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland Privacy Policy: https://www.linkedin.com/legal/privacy-policy
- Lucky Orange: Lucky Orange LLC, 8680 w. 96th Street, Suite 200, Overland Park, KS 66212, USA ; Privacy Policy: https://www.luckyorange.com/legal/privacy
- Triple Whale: Triple Whale Inc.,7th Floor, Jaffa St 224, Jerusalem, Israel; Privacy Policy: https://www.triplewhale.com/pages/privacy-notice
5.15 Advertising services
5.15.1 Scope of processing
Advertising services are used to address visitors to the online presence. Target groups can be created that have, for example, accessed certain pages. This makes it possible to identify the user on other online presences and display targeted advertising. Cookies are placed on the user's computer for this purpose. This allows personal data to be stored and analyzed, in particular
- the user's activity (in particular which pages have been visited and which elements have been clicked on),
- Device and browser information (in particular the IP address and the operating system),
- data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and
- also data from advertising partners (in particular pseudonymized user IDs).
5.15.2 Purpose of the processing
Advertising services are used to address specific target groups in order to show them advertising that matches their interests when they visit the website
5.15.3 Legal basis
The legal basis for the use of advertising services is the voluntary and revocable consent given by you in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.
5.15.4 Storage duration
Personal data will be anonymized by Google, among others, 14 months after your last activity, unless there are legal obligations to retain it.
5.15.5 Recipients of personal data
Your data will be passed on to the following providers to the extent necessary as part of order processing.
- Google AdServices: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
- Google Double Click: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
- Adcell: Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin; Privacy Policy: https://www.adcell.de/datenschutz
- Bing Ads: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
- Taboola: Taboola, Inc.16 Madison Square West, 7th fl., New York, NY, 10010, Privacy Policy: https://www.taboola.com/policies/privacy-policy
5.16 Facebook pixel - shared responsibility with Facebook
5.16.1 General information
We use the so-called "Facebook pixel" from Meta Platforms Ireland Limited ("Meta") - formerly Facebook Ireland Limited - on our websites under joint responsibility.
When you access our website via your browser, the Facebook pixel built into it initiates cookie storage in your system if you have given your consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.
The controllers within the meaning of Art. 26 GDPR are
- Meta Platforms, Ireland Ltd, 4 Grand Canal Square, Dublin 2 Ireland
- Valkental GmbH, Rheinpromenade 9, 40789 Monheim am Rhein, Germany
5.16.2 Agreement on joint responsibility
The agreement on joint responsibility pursuant to Art. 26 para. 1 sentence 2 GDPR is available at: https://www.facebook.com/legal/controller_addendum
5.16.3 Data processing by Meta
All information collected by the cookie is forwarded to Meta and allows Meta to draw conclusions about your user behavior. If you are registered on a Meta platform/service, Meta can assign this visit to you. Even if you are not registered on a Meta platform/service or are not logged in, there is a possibility that Meta will receive your IP address and other identifying features and store them in an assignable manner.
Further information regarding the data processing for which Meta is responsible can be found, for example, in the following sources of information:
- Meta Terms of Use: https://www.facebook.com/legal/terms/update
- Data policy: https://de-de.facebook.com/privacy/explanation
5.17 Social media presence
5.17.1 General information
We use third-party platforms to provide you with information about our company and our products and services. This involves processing interactions such as messages, likes and content on our social media channels.
In addition, we receive non-personal data from third-party platforms, such as the total number of actions played by the platform operator or preferred visiting and posting times. We have no influence on the creation and provision of this data. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in improving our marketing measures.
The associated personal data processing takes place exclusively in the area of responsibility of the platform operators. Further information on data processing can be found in the privacy policies of the respective providers:
- Instagram:https://de-de.facebook.com/help/instagram/519522125107875
- Facebook: https://www.facebook.com/privacy/policy/
- YouTube:https://policies.google.com/privacy
- LinkedIn:https://www.linkedin.com/legal/privacy-policy?_l=de_DE
- TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en
5.18 Integration of third-party services and content
5.18.1 General information
We use content or service offers from third-party providers within our online offer in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").
This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visit time and other information about the use of our online offer, as well as being linked to such information from other sources.
5.18.2 GoogleFonts
Integration of fonts: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
5.18.3 Google Photos
Integration of photos: Google Photos, Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
5.18.4 Google Videos
Integration of videos: Google Videos, Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
5.18.5 Google Maps
Integration of maps: Google Maps, Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
5.18.6 Review widget
Customer reviews on Google: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.review-widget.net/privacy.html
5.18.7 Weglot
Language settings: Weglot SAS, 138, rue Pierre Joigneaux in Bois-Colombes 92270 France, Privacy Policy: https://weglot.com/privacy/
6 Your rights
In this section, we inform you about the rights you have in relation to the processing of your data. The exact scope of the right mentioned in each case can be found in the corresponding article of the GDPR. If you wish to exercise any of your rights, please contact us by email (support@valkental.de).
6.1 Right to confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed by us.
6.2 Information (Art. 15 GDPR)
You have the right to receive free information from us at any time about the personal data stored about you and a copy of this data in accordance with the statutory provisions.
6.3 Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.
6.4 Erasure (Art. 17 GDPR)
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds provided for by law applies and insofar as the processing or storage is not necessary.
6.5 Restriction of processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the legal requirements is met.
6.6 Data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 para. 1, sentence 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
In exercising your right to data portability pursuant to Art. 20 (1) GDPR, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.
6.7 Objection (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on data processing in the public interest pursuant to Art. 6 para. 1 sentence 1 lit. e) GDPR or on the basis of our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
6.8 Revocation of consent under data protection law
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
6.9 Complaint to a supervisory authority
You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.
7 Up-to-dateness and changes to the data protection information
This privacy policy is currently valid and has the following status: March 2023.
If we further develop our website and our offers or if legal or official requirements change, it may be necessary to amend this data protection notice. You can access the current data protection information at any time here.
Use of the SalesViewer® technology:
This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes on the basis of the website operator's legitimate interests (Art. 6(1)(f) GDPR).
For this purpose, a javascript-based code is used to collect company-related data and the corresponding use. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify the visitor to this website.
The data stored by Salesviewer is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.
You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent the collection of data by SalesViewer® within this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.