|Google Analytics||after visitor confirmation||When the Hakle homepage is started for the first time, a “cookie banner” appears, which asks for permission to activate this cookie. You can allow or deny this in the banner. Details see below.|
|__utma||Contains a randomly generated User-ID. With this ID, Google Analytics can recognize returning users on this website and merge data from previous visits.||2 years|
|__utmz||This cookie stores information about which source (from which other website or advertisement) a user last visited the website.||6 months|
|Cookie to remember the cookie settings||technically||infinite|
|WPML language selection cookiee||technically||We offer the Hakle homepage in German and English. The cookie stores your language selection.||infinite|
|Google Analytics||after visitor confirmation||At the first launch of the Hakle homepage, a “cookie banner” appears, asking for permission to activate this cookie. You can allow or decline this in the banner. See details below.||infinite|
Hakle Online Shop:
|Google Analytics||after visitor confirmation||
At the initial launch of the Hakle homepage, a “cookie banner” appears,
|_ga||It contains a randomly generated user ID. With this ID, Google Analytics can recognize recurring users on this website and consolidate the data from previous visits.||2 years|
It contains a randomly generated user ID. With this ID, Google Analytics
|google-analytics-enabled||Saving the setting of whether Google Analytics has been enabled or disabled.||infinite|
|Cookie for remembering the cookie settings.||technical||infinite|
|timezone||technical||Saving the visitor’s time zone.||infinite|
|Stripe||__stripe_mid||Stripe is used for processing credit card payments. Stripe uses a cookie to remember who you are and enable Hakle to process payments without storing credit card information on its own servers.||1 year|
This website also uses third-party cookies, which are cookies created by a website other than the one the user is currently visiting.
It should be noted that the mentioned third-party providers, listed below with their respective links to their privacy policies, usually act as independent data controllers for the data collected through the cookies they provide. In this case, the user gives or denies consent directly to the owner of the respective cookie, to whom the website simply refers. The management of the information collected by “third-party providers” is governed by their privacy policies, which can be accessed by clicking the link in the “Cookie List” table under the respective heading.
Social plugins and social media walls: These services are used to collect content from social channels used by the data controller (e.g., YouTube, Twitter, Instagram, LinkedIn, etc.). They are parts of the visited page that are directly generated by the aforementioned social channels and integrated into the website itself.
The use of such tools aims to share the content of the visited website on one’s own profile in the social network. These services use “third-party cookies.” The management of the information collected by “third-party providers” is governed by their privacy policies, which can be accessed by clicking the link in the “Cookie List” table under the respective heading.
Cookie settings: When accessing the website for the first time, the user can make a selection and indicate which cookies they want to allow through the cookie banner. You can review your cookie settings at any time by clicking here. The user can also allow, block, or (wholly or partially) delete cookies through the specific features of their web browser. If you wish to disable these cookies or want more information on how to adjust cookie usage through your web browser, please refer to the respective instructions:
Caution: The user is informed that the non-acceptance of technical cookies can prevent the use of the website, the display of its content, and the utilization of its services. Disabling functional cookies may result in certain services or features of the website being unavailable or not functioning properly, and the user may be required to modify or manually enter certain information or settings with each visit to the website.
However, the non-acceptance of other cookies, including third-party cookies, does not affect the functionality of the website.
The decisions made by the user regarding the website’s cookies are stored in a specific technical cookie with the characteristics specified in the corresponding cookie table. User settings related to cookies must be reset when using different devices or browsers to access the website.
Sofidel respects your right to privacy and protects your personal data. Below you will find an information notice in accordance with Articles 13 and 14 of the European Regulation No. 679/2016 on the protection of personal data (hereinafter referred to as the “GDPR”) regarding the processing of your personal data provided when visiting our websites and/or using the services contained therein.
The following paragraphs describe the general rules for data processing, cookie rules, and the options to withdraw consent for specific processing of personal data at any time.
Your personal data will be processed by Sofidel in accordance with applicable laws and regulations. Please note that, by data processing, we refer to any operation or set of operations, whether automated or not, performed on personal data, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
1. DATA CONTROLLER AND DATA PROTECTION OFFICER
The data controllers are Sofidel S.p.A., with registered office at Via Giuseppe Lazzareschi, 23, 55016 Porcari (LU), Italy, together with Sofidel Germany GmbH, with registered office at Unterm Bahnhof 10, 98574 Schmalkalden, Germany (hereinafter referred to as the “Data Controllers” or “Sofidel”). The Data Protection Officer of Sofidel (DPO) can be reached at email@example.com.
2. CATEGORIES AND TYPES OF PROCESSED PERSONAL DATA
When using the websites www.regina.eu, www.shop.hakle.de, www.hakle.de, www.sofidelshop.com (hereinafter referred to as the “Websites”), Sofidel may collect and process the following personal data:
a. Navigation data
This refers to all parameters related to the operating system and computer environment you are using, including IP address, location (country), domain names of the computers, URI (Uniform Resource Identifier) addresses of the resources requested on the websites, time of the requests, method used to submit the requests to the server, size of the files received in response to a request, numerical code indicating the status of the response given by the server (successful, error, etc.), and so on. These are information collected by the websites and necessary for their operation.
Please note that this personal data is solely used by the data controllers to obtain anonymous statistical information about the use of the websites, verify their proper functioning, and identify any malfunctions and/or abuses. This personal data is immediately deleted after processing, except when it is necessary to identify the individuals responsible for hypothetical computer crimes against the websites or third parties.
b. Data voluntarily provided by the user
This refers to personal data voluntarily entered by you in the information collection forms that may be present on the websites, such as the contact form in the “Contact” section where you are requested to provide your contact details, such as first and last name, residence and/or province, email address and/or telephone number. It also includes personal data you provide when making information requests that are sent to the customer service email addresses published on the websites.
c. Data processed due to online services
In addition to specific information that may be available in different sections of the websites, this document also applies to the processing of data that you voluntarily provide for the purpose of using online services. This includes, for example, registration and access to your personal area, where your personal data such as personal details and contact information are processed.
e. Data voluntarily provided by third parties
When using the services of the websites, personal data of third parties that you have provided to the data controller may be processed (e.g., in the case of data provided for the purchase of products to be shipped to third parties). In relation to such cases, you act as an autonomous data controller and guarantee that the processing of third-party data, where required, is based on the prior consent of the third party obtained by you.
3. PURPOSE OF PROCESSING
Your personal data will be processed, with your consent if applicable, for the following purposes:
1. To enable navigation on the websites and provide services, such as participating in contests and lotteries according to the competition rules published on the respective website by the data controller, including the management of security profiles. The specific privacy notices for contests and lotteries apply accordingly.
2. With reference to the website www.shop.hakle.de, for the management of online sales services in individual purchases or subscriptions, including invoicing, processing returns, checking the status of orders placed, and responding to inquiries directed to the data controller regarding customer service, product returns, and shipping.
3. To respond to the questions you have submitted through the relevant forms on the websites or via the customer service email addresses published on the websites.
4. With your consent, to send you advertising and marketing communications, including newsletters, promotional offers, commercial initiatives, advertising materials, direct sales, and market research related to the data controller’s and/or business partner’s products and services, as well as invitations to events and initiatives organized by the data controller or group companies, through automated means (SMS, MMS, email, fax, automatic call systems without operator assistance, use of social networks, WhatsApp) and non-automated means (paper mail, telephone).
5. With your consent, to analyze your purchase decisions and behavioral preferences in order to structure communications and personalized commercial offers, conduct general analyses for strategic alignment, transmit commercial information, and generally perform analyses.
6. For statistical evaluation and monitoring purposes, including the analysis of aggregated information that does not relate to identified or identifiable natural persons and therefore does not constitute personal data and does not enable the data controller to trace your identity.
7. To fulfill obligations under applicable laws, regulations, or EU legislation or to comply with governmental requests.
8. When necessary for the establishment, exercise, or defense of legal claims in court.
4. LEGAL BASIS AND MANDATORY OR OPTIONAL CHARACTER OF DATA PROCESSING
The legal basis for processing personal data for the purposes mentioned in items 1, 2, and 3 is Art. 6(1)(b) of the GDPR, as the processing is necessary for the provision of the requested services. Providing personal data for these purposes is optional, but not providing it would result in the inability to access the desired services.
The processing for marketing and analysis purposes described in items 4 and 5 is based on your consent pursuant to Art. 6(1)(a). Your consent can be revoked at any time. Providing your personal data for these purposes is entirely voluntary and does not affect the use of other services offered by the websites. If you wish to object to the processing of your data for marketing or analysis purposes, you can contact the data controller at the addresses indicated in the “Contact” section of this notice.
Finally, it should be noted that the processing mentioned in item 6 does not fall within the scope of the legislation on the protection of personal data since it does not concern personal data and can therefore be freely carried out by the data controller.
The purpose mentioned in item 7 constitutes a lawful processing of personal data within the meaning of Art. 6(1)(c) of the GDPR.
The processing carried out for the purposes mentioned in item 8 is based on the legitimate interest of the data controller within the meaning of Art. 6(1)(f) of the GDPR.
5. RECIPIENTS OF PERSONAL DATA
Your personal data may be disclosed to the following recipients for the specified purposes:
– Service providers who typically act as data processors pursuant to Article 28 of the GDPR, especially individuals involved in the provision of services (such as hosting providers or email platform providers), service providers responsible for technical maintenance (including maintenance of network equipment and electronic communication networks), etc.
– Service providers authorized by the data controller to process personal data necessary for the performance of activities exclusively related to the provision of services, who have committed to maintaining confidentiality or have an appropriate legal obligation of confidentiality.
– Service providers, organizations, or authorities to whom the transmission of your personal data is mandatory under the provisions of the law or authorities’ orders.
– Your data may be made accessible to other companies within the Sofidel Group for the same purposes as mentioned above and/or for administrative and accounting purposes in accordance with Article 6(1)(f) and Recitals 47 and 48 of the GDPR.
6. TRANSFER OF PERSONAL DATA
Some of your personal data may be transferred to entities located outside the European Economic Area. Sofidel ensures that the processing of your personal data by these parties is done in accordance with Articles 44 to 49 of the GDPR. In fact, transfers may be based on an adequacy decision or on standard contractual clauses approved by the European Commission, or on another appropriate legal basis. For more information, you can submit a written request to the data controller at the addresses provided in the “Contact” section of this notice.
7. THE STORAGE OF PERSONAL DATA
Personal data processed for the purposes mentioned in Section 3 (“Purposes of Processing”) under items 1 and 3 will be retained for the period necessary to achieve those purposes.
Personal data processed for the purposes mentioned in item 2 will be kept for as long as necessary to fulfill those purposes, which means as long as it is necessary for the performance of the contract or for the provision of legal or contractual guarantees, while respecting the legally required retention periods. For the purposes mentioned in items 3 and 4, your personal data will be processed for as long as it is strictly necessary to achieve the purposes for which they were collected, taking into account the principle of data minimization as stated in Article 5(1)(c) of the GDPR, and in any case, until your consent is revoked. In the event of consent withdrawal, the data processed for the purposes mentioned in items 3 and 4 will be permanently deleted or anonymized.
In general, Sofidel reserves the right to retain your data for as long as necessary to fulfill its legal obligations or for the purpose of potential defense. This is without prejudice to the data controller’s ability to retain your personal data for the period provided and allowed by law to protect its interests.
Further information regarding the duration of data retention and the criteria used to determine this duration can be obtained by submitting a written request to the data controller at the addresses provided in the “Contact” section of this notice.
8. HAKLE ONLINE SHOP
a. Data Processing during Registration in the Hakle Shop
There is an option to register as a customer in the Hakle Shop, which involves creating a password-protected customer account.
The data provided during registration, as indicated in the input form, will be used exclusively for the internal permanent storage of your personal data in a password-protected customer account. The IP address, date, and time of registration will be stored.
b. Data Processing during the Ordering Process
The processing of data during orders is necessary to process all transactions within the order. The legal basis for this is Article 6(1)(b) of the GDPR. The data required for the order can be found in the input form you fill out during the ordering process.
For the fulfillment of the contract, it may be necessary to transmit the data to our payment service providers or the designated financial institution, depending on the selected payment method. The following payment methods may be used:
· Klarna (Instant payment / Invoice)
The European operating company of PayPal is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. If you choose PayPal as the payment method, the data required for the payment process will be automatically transmitted to PayPal. This typically includes the following data: name, address, company, email address, telephone and mobile number, IP address. The data transmitted to PayPal may be forwarded to credit agencies. This transmission serves the purpose of identity and creditworthiness checks.
· Credit Card / Stripe
If you choose a payment method offered by the payment service provider “Stripe,” payment processing will be carried out by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We will transmit the information provided during the ordering process (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) to Stripe Payments Europe Ltd. in accordance with Article 6(1)(b) of the GDPR for the purpose of payment processing. Your data will be forwarded to Stripe Payments Europe Ltd. exclusively for the purpose of payment processing and only to the extent necessary. For more information on data protection by “Stripe,” please visit the following website: https://stripe.com/de/privacy#translation.
c. Data Processing for Newsletter Subscription or Inquiries via the Contact Form
For the purpose of sending our newsletter and processing it to you, we process the following personal data: first name, last name, email address. For more information on the purposes and legal basis of data processing, please refer to Sections 3 (“Purpose of Processing”) and 4 (“Legal Basis of Processing”).
9. HAKLE WEBSITE
Newsletter Subscription and Inquiries via the Contact Form:
We process your personal data for the following purposes:
– Newsletter subscription and inquiries sent to us via the contact form. In this context, we process your first name, last name, email address, and the content of your inquiry. Additionally, we process data for marketing purposes, anonymous market analysis, and opinion surveys. For opinion surveys, we use your email address to send invitations to you.
For more information on the purposes and legal basis of data processing, please refer to Sections 3 (“Purpose of Processing”) and 4 (“Legal Basis of Processing”).
Regarding the storage period, we generally process your data only for as long as necessary. The personal data we process for newsletter subscriptions will be stored as long as you are subscribed to the newsletter. You can unsubscribe from the newsletter at any time by revoking your consent. You can either do this through a link in one of our newsletters or by sending us an email at firstname.lastname@example.org. Your data will then be deleted.
Retailer and Press Area:
In addition, we offer a login area for retailers and press information. To use this area, registration in the download section of the website is required. The data we process in this context include your name, email address, and any additional information you provide in the free-text field. Through the Retailer & Press Login, we provide current images, publications, and technical information about our products. Retailers and press representatives can find high-quality product photos and other images available for download. Registration is required for accessing the protected image material due to legal reasons.
Website Content Display:
When you visit our website/online shop, we collect the data necessary for us to display our website to you and ensure its stability and security.
In this context, we use a cookie to store your language preference (German/English) when visiting the homepage or shop.
For this purpose, we process the following personal data: device identifier and online ID, other usage data; name of the internet provider, your IP address, the website you visited before, information accessed by you on our website, date and time of website access, the operating system used, and the version of the respective browser.
The legal basis for processing is the protection of our legitimate interests in accordance with Article 6(1)(f) of the GDPR.
Regarding the storage period, we process this data in an anonymized form for a maximum of one year after your last visit to our websites.
11. LINKING OF SOCIAL MEDIA
Through our website and/or online shop, we provide links to the following social media platforms: Facebook, YouTube, and Instagram, using corresponding social media buttons. If you do not wish your usage data (e.g., address of the currently visited page) to be transmitted to these services, this can be prevented by only accessing the services upon clicking the respective button. On the service’s page, these mentioned social networks may collect usage and, if applicable, user data. We neither have control over the personal data collected by the service providers nor the extent of data collection, the purposes of processing, or the storage or deletion periods.
Based on our current knowledge, we would like to inform you as follows:
Your browser establishes a direct connection with the server of the service provider only when you access the link or click the button. As a result, the information that you have visited our website is indirectly forwarded to these services (referrer). If you are already logged into your personal user account with the service during your visit to our website, you can usually share the document (known as “sharing”) or leave a comment, etc., by clicking the social media buttons. If you do not wish for such data transmission to occur, we advise against clicking the social media buttons.
For further information, particularly regarding the purposes and scope of data processing by the social service providers, as well as your rights and privacy protection settings, please refer to the privacy policies of these services.
12. EMBEDDING YOUTUBE VIDEOS
Sofidel can embed videos from YouTube on the websites mentioned in Section 2. YouTube is an internet video portal that allows video publishers to upload video clips for free and enables users to view, rate, and comment on these videos free of charge. YouTube permits the publication of all types of videos, including full-length films and television shows, music videos, trailers, and user-generated content, accessible through the internet portal.
The operating company of YouTube is YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Each time one of our web pages with an integrated YouTube component (YouTube video) is accessed, the internet browser on the information technology system of the person concerned is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information about YouTube can be found at https://www.youtube.com/yt/about/.
As part of this technical process, YouTube and Google are informed about which specific subpage of our website is visited by the individual concerned.
If the person concerned is logged into YouTube at the same time, YouTube recognizes with each visit to a subpage containing a YouTube video, which specific subpage of our website the person concerned is visiting. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.
YouTube and Google receive information via the YouTube component that the person concerned has visited our website whenever the person concerned is logged into YouTube at the time of accessing our website, regardless of whether the person concerned clicks on a YouTube video or not. If the person concerned does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.
To prevent the transmission of their personal data when accessing the page, we have implemented a two-click solution in addition to a consent banner for YouTube videos.
For the execution and evaluation of sweepstakes, we also process personal data that you have voluntarily disclosed through social platforms such as Facebook or Instagram, or provided to us as part of a sweepstakes. By participating in the sweepstakes, you have given your consent to the processing of your personal data in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). In this context, we mostly process the following personal data, which are necessary for participation: your first and last name, your contact details (if provided: postal address, email address), as well as additional information (e.g., age, gender, your reactions to market research, purchase history). Providing the necessary data is required for the purpose of participating in the sweepstakes and fulfilling all regulatory obligations. Failure to provide this data will prevent the processing of your participation.
During your participation in the sweepstakes, your personal data may be processed as follows and for the following purposes:
– The data will be processed for the administration of your participation in the sweepstakes, so that you can receive discount vouchers for future purchases of products and services or other free benefits. The processing of your personal data necessary for participation in the sweepstakes is required for the fulfillment of the sweepstakes contract in accordance with Article 6(1)(b) of the GDPR.
– The data will be processed for the automated (e.g., email) and non-automated paper mail delivery of information about the products and initiatives of the data controller, with your consent. This also includes information related to market research and/or participation in award ceremonies and events organized by the data controller. The legal basis for the processing of your data is Article 6(1)(a) and (f) of the GDPR. The data subject has the possibility to object to this processing of data at any time free of charge (contact details in Section 16) and to revoke their previously given consent with effect for the future.
– With your consent, the details of your information (e.g., place of residence, age, salutation, your reactions to market research, etc.) can be analyzed to define a profile of your preferences for statistical and/or commercial purposes. The legal basis for processing your data for this purpose is Article 6(1)(a) of the GDPR.
– For the administration of participation in sweepstakes conducted by the data controller for the benefit of users and for the delivery of prizes, no consent is required as the legal basis for processing this data is Article 6(1)(b) of the GDPR.
If you do not agree to the processing of the necessary data for these purposes, you cannot participate in the sweepstakes.
Your data will be stored for the period necessary to fulfill the aforementioned purposes or as required by legal retention obligations. Afterward, your data will be deleted in compliance with data protection regulations.
Furthermore, specific privacy provisions apply to each individual sweepstakes.
14. RIGHTS OF THE DATA SUBJECT
In accordance with Articles 15 to 22 of the GDPR, you have the right to access your personal data at any time. In particular, you can request the rectification (under Article 16), erasure (under Article 17), restriction (under Article 18), and portability of your data (under Article 20). You also have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you (under Article 22). Additionally, you have the right to withdraw your consent at any time (under Article 7(3)).
Furthermore, you can object to the processing of your personal data by providing reasons for your objection. The data controller reserves the right to examine such requests and may not comply if there are compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms. We also inform you that you have the right to object, at any time and without stating reasons, to the analysis and sending of direct marketing through automated means (such as SMS, MMS, email, fax, automatic calling systems without human intervention, social networks, WhatsApp), as well as non-automated means (paper mail, telephone). Moreover, this right can be exercised partially regarding direct marketing, meaning that, for example, you may only refuse the sending of advertising messages through automated instruments.
In any case, you have the right, under Article 77 of the GDPR, to lodge a complaint with the competent supervisory authority (data protection authority) if you consider that the processing of your data violates the applicable regulations or, under Article 79 of the GDPR, to initiate legal proceedings.
To exercise the aforementioned rights or for any other inquiries, please contact the data controller in writing at email@example.com.
Teile der Datenschutzerklärung können von uns geändert oder
aktualisiert werden, ohne dass Sie vorher von uns benachrichtigt werden.
Bitte überprüfen Sie jeweils die Datenschutzerklärung bevor Sie unser
Angebot nutzen, um bei möglichen Änderungen oder Aktualisierungen auf
dem neusten Stand zu sein.
Zuletzt geändert am: 08.12.