Privacy Policy
Website privacy policy https://elsllumsdesantpau.com/
Introduction and terms
1. GENERAL
When operating our website with the URL https://elsllumsdesantpau.com/ (hereinafter, the “website”), we process personal data. We treat these data confidentially and process them in accordance with applicable legislation, in particular the General Data Protection Regulation (RGPD). With these data protection provisions, we want to inform you about what personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. In addition, we will explain what rights you have to protect and enforce the privacy of your data.
2. CONDITIONS
Our privacy policy contains technical terms that are used in the GDPR. For your better understanding, we would like to explain these terms in simple terms in advance:
Personal data
"Personal data" means any information relating to an identified or identifiable person (Art. 4 nº 1 GDPR). The data of an identified person can be, for example, the number or email address. However, personal data are also those whose identity is not immediately obvious, but which can be determined by combining own or third-party information to find out who the person is. A person can be identified, for example, by providing their address or banking data, their date of birth or user number, their IP addresses and/or location data. All information that can be used to identify a person in any way is relevant in this case.
Treatment
Article 4 nº 2 of the RGPD defines “treatment” as any operation related to personal data. This applies in particular to the collection, registration, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, diffusion or any other form of making available, alignment or combination, restriction, deletion or destruction of personal data.
Person responsible and responsible for data protection
3. MORE RESPONSIBLE
The person in charge of data processing is:
Company: Christmas Garden Deutschland GmbH (“we”)
Legal representative: Sebastian Stein; Christian Diekmann
Address: Potsdamer Str. 58 10785 Berlin
Telephone: +49 30-81075-0
Email: info@christmas-garden.de
4. RESPONSIBLE FOR DATA PROTECTION
We have appointed an external data protection officer for our company. You can contact him at
Company: HABEWI GmbH & Co KG
Legal representative: General partner HABEWI Beteiligungs GmbH, represented by Arne Platzbecker (General Manager)
Address: Palmaille 96, 22767 Hamburg
Telephone: 040/ 46008966
Fax: 040/ 46008977
Email: datenschutz@habewi.de
Processing framework
5. TREATMENT FRAMEWORK: WEBSITE
As part of the website, we process your personal data detailed below in Section IV. We only process the data that you actively provide us on the website (for example, by filling out forms) or that you provide us automatically when using our website.
Your data will be processed exclusively by us and will not be sold, lent or transmitted to third parties. If we use the help of external service providers to process your personal data, this is done in the framework of the so-called order processing, in which we, as the client, are authorized to give instructions to our contractors. We use external service providers to host our website. We host our website with the external provider HostPress GmbH (address: Bahnhofstraße 34 66571 Eppelborn) in the data center in Losheim and Saarwellingen, Germany. If other external service providers are used for the individual processing operations listed in section IV, they will be named there.
We do not transfer data to third countries nor do we plan to do so. We will inform you about the exceptions to this principle in the treatment described below. Any transfer of data to third countries will be carried out on the basis of the so-called EU standard contractual clauses.
The treatment in detail
6. AVAILABILITY OF THE WEBSITE AND THE SERVER RECORD FILES
Description of treatment
Every time you visit the website, we automatically collect information that your browser transmits to our server. This is the following data
- IP address
- Navigation software used, as well as its version and language
- Operating system
- the website from which visitors arrived at the website (the so-called “referent”)
- the subpages accessed on the website
- date and time of access to the website
- Internet service provider
- Country and location from which a user visited the website
They are also stored in the so-called registry files of our system. The temporary storage of your IP address by the system is necessary to be able to offer our website to the user's end device. For this, the user's IP address must remain stored for the duration of the session. Your IP address is also recorded in the log files for security reasons to defend against attacks on our website (in particular, so-called DDoS attacks) and to prevent fraud.
Purpose
The purpose of the treatment is to allow access to the website and guarantee its stability and security. In addition, the treatment serves to statistically analyze and improve our online offer.
Legal basis
The treatment is necessary to safeguard the predominant legitimate interests of the person responsible for the treatment (art. 6, subsection 1, letter f of the RGPD). Our legitimate interest lies in the legitimate interest described in Section 2 indicated purpose.
Storage period
The data is deleted as soon as it is no longer necessary to fulfill the purpose for which it was collected. In the case of the collection of data for the provision of the website, this occurs when the corresponding session has ended. Log files are deleted after 30 days.
7. COOKIES
Description of treatment
Our website uses cookies. Cookies are small text files that are stored on the user's terminal device when they visit a website. Cookies contain information that allows you to recognize a terminal device and possibly certain functions of a website. We differentiate between our own cookies and external cookies, called third-party cookies. Our website uses so-called "session cookies" and "persistent cookies". "Session cookies" are automatically deleted when you end your Internet session and close your browser. "Persistent cookies" remain stored on your final device for a longer period of time. If cookies are technically necessary for the operation of our website, your consent is not required. All other cookies that are not technically necessary are only installed after you have actively consented to the use of cookies through our consent tool. We use the "Consentmanager" service, operated by consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden, to obtain and document consent. The consent tool stores your selection in a cookie on your final device. This means that you will not have to make a decision about cookies when you return to visit our website.
You can find out which cookies are used on our website and for what purpose, how long they are stored on your final device and what consent you may have already given in the configuration of the consent tool.
Purpose
We use cookies to make our website easier to use and to fulfill the functions described in section 1.
Legal basis
The treatment is necessary with respect to technically required cookies and the use of the consent tool to safeguard the primary legitimate interests of the controller (Art. 6 paragraph 1 letter f GDPR). Our legitimate interest lies in the legitimate interest described in Section 2 indicated purpose. The legal basis for the processing of all other cookies, that is, cookies that are not technically necessary, is consent (Art. 6 paragraph 1 lit. a GDPR). This consent is voluntary.
Storage period, revocation of consent
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Given that cookies are stored on your final device, you as a user have full control over their use. You can deactivate or restrict the transmission of cookies by modifying the configuration of your Internet browser. Cookies that have already been saved can be deleted. This can also be done automatically. If you deactivate, delete or restrict the cookies of our website, it is possible that some functions of our website cannot be used or can only be used in a limited way. Can revoke
at any time the consent you have given for the use of cookies in the configuration of the consent tool with effect for the future.
Recipients
When cookies are used, the data can be transmitted to the corresponding providers of these third-party services. In certain circumstances, the data may also be transferred to third countries outside the European Union or the European Economic Area. We provide information on the recipients of the data and the transfer to third countries in the configuration of the consent tool or in the corresponding section on the service of third parties in this privacy policy. If necessary, personal data will be transmitted to the service provider of the consent tool "Consentmanager", consentmanager AB.
8. CONTACT BY EMAIL
Description of treatment
You can also contact us through the email addresses listed on the website. To get in touch with us, you can write to us at the email address listed on the website. In this case, the personal data transmitted by email will be processed by us.
Purpose
The data transmitted with and in your email will be used exclusively to process and respond to your request.
Legal basis
The treatment is necessary to safeguard the predominant legitimate interests of the person responsible for the treatment (art. 6, subsection 1, letter f of the RGPD). Our legitimate interest lies in the legitimate interest described in Section 2 indicated purpose. If the contact by electronic mail has as its purpose the celebration or fulfillment of a contract, the data processing is carried out for the fulfillment of the contract (art. 6, paragraph 1, letter b) of the RGPD).
Storage period
We delete the data as soon as they are no longer necessary to fulfill the purpose for which they were collected. This usually happens when the communication with you ends. The communication ends when it can be deduced from the circumstances that your request has been conclusively clarified. If the legal retention periods prevent deletion, the data will be deleted immediately after the legal retention period has expired.
9. BULLETIN
Description of treatment
We send a newsletter at irregular intervals. With the newsletter we inform you and send you news about our offer. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by filling in and sending a subscription form to the newsletter on our website.
Only your email address is required to subscribe to the newsletter. All other data (such as your name and surname) are voluntary and are used only to personalize emails. To carry out and verify registrations in the newsletter we use the so-called double opt-in procedure. Registration is done in several steps. First, you register to receive the newsletter on our website. You will then receive an email from us at the email address you have provided. In this email, we ask you to confirm that you have indeed registered to receive the newsletter and that you wish to receive it. Confirmation is done by clicking on a confirmation link that appears in the email. Only after satisfactory confirmation will we add you to our newsletter distribution list and send you future emails. As part of the double opt-in procedure, we store the date, time and your IP address both when you register and when you confirm.
If you purchase goods or services on our website and enter your email address, we may use it later to send you a newsletter for existing customers. In such a case, only direct advertising of our own goods or similar services will be sent through the newsletter.
Purpose
The treatment takes place to offer the newsletter function and to be able to send newsletter emails to existing subscribers and clients. The collection and storage of the date, time and IP addresses when subscribing to the newsletter serves to document the consent granted and to protect against the improper use of electronic mail addresses.
Legal basis
The treatment of our subscriber newsletter is based on consent, in accordance with art. 6, app. 1, letter a of the RGPD. Your consent is voluntary. The collection and storage of the date, time and IP addresses when subscribing to the newsletter are necessary to safeguard the overriding legitimate interests of the data controller (art. 6, paragraph 1 letter f GDPR). Our legitimate interest lies in the data processing described in section 2 for the indicated purpose.
In the case of our newsletter for existing customers, the treatment is carried out on the basis of art. 6, app. 1, letter f of the RGPD to protect the superior interests of the data controller. Our legitimate interest lies in direct advertising to existing clients.
Period of storage and revocation of consent
If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration email, your data will be automatically deleted. We process your personal data for the duration of your subscription to the newsletter. You can cancel your subscription to our newsletter at any time by revoking your consent. You can also object at any time to us using your email address to send our newsletter to existing clients. For this, a simple declaration is sufficient (by email to 944_info@proactiv.es or by post to PROACTIV S.L_Calle Aribau, 170, Ático_08036 Barcelona_Tel: 902 731). You can also unsubscribe from the newsletter by clicking on the unsubscribe link that appears in each newsletter email. If you withdraw your consent, we will stop sending you newsletters and your personal data will be removed from our active mailing list.
Recipients and transfer to third countries
We use the services of the newsletter provider Mailchimp to manage our newsletter distribution list and send the emails. This takes place in the framework of the processing of orders. Mailchimp is a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (hereinafter, “Mailchimp”). When you register to receive the newsletter, the data you provide during the registration process is transferred to Mailchimp and processed on Mailchimp servers in the US. You will find more information about data protection in Mailchimp in the privacy policy of the service provider at mailchimp.com/legal/privacy/.
10. SOCIAL NETWORKS
Description of treatment
Our website does not use any social network plugins. The X, Facebook, Instagram and TikTok logos that appear on our website are simply linked to the corresponding profiles of our company on social networks. No data is transferred to social networks when the logos are integrated. If you click on one of the logos, you will only be redirected to the external website of the corresponding social network.
Description of treatment
Some subpages of our website contain so-called social plugins, which are offered by the external social networks X, Facebook, Instagram and TikTok. When you access a page that contains a plugin of this type, your browser establishes a direct connection with the servers of the social network. The content of the corresponding social plugin is transmitted directly from the social network to your browser and displayed on our website. To avoid this, we use the so-called two-click solution. We have integrated the social plugins in our website in such a way that the connection between the social plugins and the servers of the social networks is interrupted by default. If you want to communicate directly with a social network through the social plugin of our website and allow the exchange of data, you must click on the desired social plugin to activate it. After activating a social plugin, we no longer have any influence on the scope of the data collected by the respective social network. Therefore, we inform you according to our level of knowledge. When activating a social plugin, your IP address is transmitted to the respective social network in relation to the address of our website. If you are logged in to the social network when you visit our website, this information will be assigned to your user account there. If you interact with an activated social plugin, for example, "share", "like" or "retweet" a post using the social plugin, this information is also transmitted directly to the respective social network and is also stored in your user account there.
However, our profiles on social networks also constitute data processing. If you are logged in to the corresponding social network when you visit said profile, this information will be assigned to your user account there. If you interact with our profile, for example by commenting, “sharing”, “liking” or “retweeting” a publication, this information will also be stored in your user account. As a general rule, we can also see your interactions with our profile.
In our social networks, we have the option of obtaining statistical data about the use of our social media pages through the function called "Insights". These statistics are provided by the social network in question. The "Insights" function cannot be deactivated. We cannot decide to activate or deactivate this function. It is available to all operators, regardless of whether they use the "Insights" function or not. Through Insights, we are provided with the following data during a selectable period of time in relation to fans, subscribers, people reached and people who interact: Total number of pages viewed, "Like" information, including origin, page activity, post interactions, reach, post reach (divided into organic, viral and paid interactions), comments, shared content, responses and demographic analysis, i.e. country of origin, gender and age. The statistics of Insights do not allow us to identify the visitors of our profiles on social networks or to see their profiles.
The social networks with which you communicate store your data using pseudonyms as user profiles and use them for advertising and market research purposes. For example, you may be shown advertisements within the social network and on other third-party websites that match your supposed interests. As a general rule, cookies are used for this purpose, which the social network stores on its final device. You have the right to object to the creation of these user profiles; to exercise this right, you must contact the social networks directly.
Purpose
We maintain profiles on the aforementioned social networks for the purposes of public relations and corporate communication with clients and interested parties. We use Facebook's "Insights" feature to analyze the reach of our posts on the social network and make them more attractive to our visitors in the future.
Legal basis
The legal basis for the processing of data in the context of our profiles on social networks is the protection of our predominant legitimate interests (Art. 6 paragraph 1 letter f GDPR). Our legitimate interest lies in the legitimate interest described in Section 3 finality mentioned. If the respective operator of a social network asks for your consent, the legal basis is Art. 6 para. 1 bed to GDPR. The processing of data with respect to integrated social plugins is based on consent in accordance with Art. 6 paragraph 1 lit. to GDPR. We obtain it through the solution of two clicks on the point of our website where the social complement should be displayed. This consent is voluntary. Data processing takes place in relation to our presence on Facebook, otherwise on the basis of joint responsibility in accordance with Art. 26 GDPR.
Revocation of consent
You can revoke any consent you have given for the use of social plugins with effect for the future.
Recipients and transfer to third countries
The respective social networks are managed by the companies indicated below. You will find more information on data protection in relation to our profile on social networks in the linked data protection provisions.
Facebook: Meta Platforms, Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA and Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Privacy policy : facebook.com/policy.php; www.facebook.com/help/186325668085084, www.facebook.com/about/privacy/your-info-on-other#applications and www.facebook.com/about/privacy/your-info#everyoneinfo.
Instagram: Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland, Privacy Policy : https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. Privacy policy : https://www.tiktok.com/legal/page/eea/privacy-policy/de
X (Twitter) International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07
Ireland, Privacy Policy : https://x.com/de/privacy
Social networks also process their personal data in the United States.
11. GOOGLE ANALYTICS
Description of treatment
Our website uses “Google Analytics”, a web analytics service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, EE. (hereinafter, “Google”). Google Analytics uses cookies (see the section), which allow us to analyze the use you make of our website. The information generated by cookies is normally transferred to a Google server in the US. and it is stored there. However, we only use Google Analytics with IP anonymization. This means that your IP address will be truncated by Google within the member states of the European Union or in other signatory states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US. and it will be truncated there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics collected by Google Analytics record in particular how many users visit our website, the country or location from which it is accessed, which subpages are accessed and which links or search terms visitors use to reach our website. You will find a summary of data protection in Google Analytics at https://support.google.com/analytics/answer/9019185?hl=en#zippy=%2Cin-this-article. Google's privacy policy can be consulted at www.google.de/intl/de/policies/privacy.
Purpose
The treatment takes place to be able to analyze the use of our website. The information obtained is used to improve and personalize our online presence.
Legal basis
The treatment is based on consent in accordance with article 6, section 1, letter a) of the RGPD. We obtain it through the consent tool (see section 1). This consent is voluntary.
Storage period and right of opposition, withdrawal of consent
We have explained the storage period and its cookie control and configuration options in section 4 explained. You can revoke the consent you have given with respect to Google Analytics at any time in the configuration of the consent tool with effect for the future. Alternatively, you can object to the processing of data by Google Analytics at any time by downloading and installing the browser plug-in offered by Google at tools.google.com/dlpage/gaoptout?hl=en . The analysis data processed and stored with Google Analytics will be automatically deleted by us after 14 months.
Recipients and transfer to third countries
According to the German data protection supervisory authorities (Data Protection Conference), Google Analytics is co-responsible for data processing on our behalf. In this context, we have also signed with Google the "Data Protection Conditions of the Data Controller of Google Measurement". Google also processes your personal data in the United States.
12. GOOGLE WEBFONTS
Description of treatment
Our website uses “Google Webfonts”, a font substitution service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter, “Google”). Google Web Fonts replaces the standard fonts of your device with fonts from the Google catalog when displaying our web site. If your browser prevents the integration of Google Web Fonts, the text of our website will be displayed with the standard fonts of your device. Google fonts are loaded directly from a Google server. For this, your browser sends a request to a Google server. This can also transmit your IP address to Google in relation to the address of our website. However, Google Web Fonts does not store any cookies on your final device. According to Google, data processed as part of the Google Web Fonts service is transferred to specific resource domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same number or Gmail. You will find general information about data protection at Google at google.com/privacy?hl=en-DE .
Purpose
The purpose of the treatment is to make the text of our website easier to read and more aesthetically pleasing.
Legal basis
The treatment is necessary to safeguard the predominant legitimate interests of the person responsible for the treatment (art. 6, subsection 1, letter f of the RGPD). Our legitimate interest lies in the legitimate interest described in Section 2 indicated purpose.
Recipients and transmission to third countries
The use of Google Web Fonts may result in the transmission of personal data to Google. Google also processes your personal data in the United States.
13. GOOGLE ADS CONVERSION
Description of treatment
Our website uses the advertising service "Google Ads Conversion", operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter, "Google"). With the help of Google Ads Conversion, we can place advertisements on external websites to draw attention to our offers. The service also allows us to determine the scope and success of individual advertising measures. Google distributes our advertisements through so-called “ad servers”. For this, Google uses so-called "ad server" cookies, which are used to measure certain parameters to measure success, such as the display of advertisements or user clicks. If you access our website through a Google ad, Google Ads will store a cookie on your final device (see section). According to Google, these cookies do not aim to identify you personally. The unique cookie ID, the number of ad impressions per location (frequency), the last impression (relevant for conversions after viewing) and opt-out information (marking that the user no longer wishes to be directed to him) are usually stored as analysis values for this cookie. Cookies allow Google to recognize your Internet browser. If you visit the website of a Google Ads client and the cookie stored on your end device has not yet expired, Google and the client can recognize that you have clicked on the ad and been redirected to our website. Each Google Ads client is assigned a different cookie. Therefore, cookies cannot be tracked through the websites of Google Ads clients. We ourselves do not process any personal data with our Google Adwords advertising measures. Google only provides us with statistical analyses. These analyzes allow us to recognize which of the advertising measures used are particularly effective. We no longer receive data on the use of advertising material; in particular, we cannot identify users on the basis of this information. Therefore, when you visit our website, a connection is established with Google's servers. We have no influence on the scope and subsequent use of the data collected by Google through the use of Google Ads Conversion and, therefore, we inform you according to our state of knowledge: Through the integration of Google Ads Conversion, Google receives information on which subpage of our website you have accessed or clicked on our ad. If you are registered in a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that Google will find out and store your IP address. You can consult Google's privacy policy at www.google.de/intl/de/policies/privacy.
Purpose
The treatment is carried out in order to carry out online advertising aimed at our own offers and to be able to evaluate their effectiveness and scope.
Legal basis
The treatment is based on consent in accordance with article 6, section 1, letter a) of the GDPR. We process it through the "Consentmanager" consent tool (see section 1). This consent is voluntary.
Storage period and right of opposition, withdrawal of consent
We have explained the storage period and its cookie control and configuration options in the explained section. You can also object to the processing of data by Google Ads Conversion at any time through the following website: www.google.com/ads/preferences. You can revoke the consent you have given with respect to the collection of data by Google Ads Conversion at any time in the configuration of the consent tool with effect for the future.
Recipients and transmission to third countries
The integration of Google Ads Conversion can lead to the transmission of personal data to Google. Google also processes your personal data in the United States.
14. GOOGLE TAG MANAGER
Our website uses the “Google Tag Manager”, a service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, EE. (hereinafter, “Google”). Google Tag Manager does not collect personal data or install cookies. This service only allows us to integrate and manage tags on our website. Tags are small code elements on our website that are useful to measure traffic and visitor behavior with other tools, measure the impact of online advertising and social channels, use remarketing and segmentation, perform tests and optimize the website. You will find more information about Google Tag Manager at https://support.google.com/tagmanager/answer/9323295?hl=de .
15. CLOUDFLARE
Description of treatment
On this website we use Cloudflare from Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) to make our website faster and more secure. Cloudflare uses cookies and processes user data. Cloudflare, Inc. is an American company that offers a content distribution network and various security services. In simple terms, Cloudflare creates copies of our website and places them on its own servers
Objective
The data transmission route to your browser is shortened significantly by means of a CDN. This means that Cloudflare delivers the content of our website not only from our hosting server, but from servers all over the world. When you visit our website now, a load balancing system ensures that the largest parts of our website are delivered from the server that can show our website to you the fastest.
Legal basis
The treatment is based on consent in accordance with article 6, section 1, letter a) of the GDPR. We obtain it through the "Consentmanager" consent tool (see section 7.1). This consent is voluntary
Storage period and right of opposition, withdrawal of consent
We have explained the storage period and its cookie control and configuration options in section 7. explained. You can revoke the consent you have given with respect to the collection of data by Cloudflare at any time in the configuration of the consent tool with effect for the future.
Recipients and transfer to third parties
countries By integrating Cloudflare, personal data can be transferred to Cloudflare. Cloudflare also processes your personal data in the United States. You will find more information about data protection in Cloudflare at https://www.cloudflare.com/es-es/trust-hub/gdpr/.
16. XANDR
Description of the processing
Xandr can collect the following personal data from you: Information about your browser, including: the type of browser you use, browser language, other settings and information about cookies information about your end device, including the operating system version, connection type, device brand, device model, device identifiers such as your IDFA or AAID and IP address, precise information about your geographic location if location services have been enabled for an application on your device that integrates Xandr technology or sends this information to the advertising platform of Send information about your activity on our website and the time you have visited it; and information about the provider of your Internet connection. Your personal data is stored in accordance with Xandr's generally recognized security standards.
Purpose
We use the Xandr advertising platform to recognize users of our website and be able to redirect them to third-party websites (retargeting), measure the success of our advertising on third-party websites and optimize our advertising based on this knowledge.
Legal basis
The treatment is based on consent in accordance with article 6, section 1, letter a) of the GDPR. We obtain it through the "Consentmanager" consent tool (see section 7.1). This consent is voluntary.
Storage period and right of opposition, revocation of consent
We have explained the storage period, as well as your cookie control and configuration options in section 7. You can revoke the consent you have given with respect to data collection at any time in the configuration of the consent tool with effect for the future or by clicking on “OPT-OUT” after accessing the following link: https: //platform.xandr.com/privacy-center/opt_out. The cookie storage period is 120 days.
Recipients and transfer to third countries
We inform you that Xandr also transfers and processes your personal data in the United States. You will find more information on data protection in relation to the Xandr advertising platform at https://www.xandr.com/privacy/platform-privacy-policy/ .
17. RTB HOUSE
Description of treatment
On our website we use the technology of RTB House SA, 61/101 Złota Street, 00-819 Warsaw, Poland. The information generated by the RTB House cookie about your use of this website, such as the browser type/version, the operating system used, the reference URL (the page visited previously), the time of the request to the server, is transmitted to the RTB House server and stored there. The recommendations integrated by RTB House are determined on the basis of previously viewed content. The content is technically controlled and delivered automatically by RTB House. Content is displayed pseudonymously.
Purpose
This technology allows us to use pixels and cookies to refer you to other content on our website or on third-party websites that may also be of interest to you (retargeting).
Legal basis
The treatment is based on consent in accordance with article 6, section 1, letter a) of the GDPR. We obtain it through the "Consentmanager" consent tool (see section 7.1). This consent is voluntary.
Conservation period and right of opposition, revocation of consent
You can revoke your consent at any time in our consent tool. RTB House immediately deletes all the data it has received in the context of bid requests, except for a small part that is necessary for statistical and analytical purposes (including brand security and fraud detection) and that is stored for no more than 100 days. The data on ad impressions and their interactions with the ad will be kept as long as they are necessary for statistical, billing and product development purposes. They are stored for a maximum of 500 days after collection, except for ad interaction data, which are stored for an additional 65 days in our backup systems, where they are not actively used and are deleted according to the predefined retention schedule.
Recipients and transfer to third countries
You can find more information about data protection here https://www.rtbhouse.com/privacy-center/all-language-versions/service-privacy-policy . RTB House will not transfer or authorize the transfer of your personal data to a territory outside the European Economic Area unless RTB House has taken the necessary measures to ensure that the transfer is carried out in accordance with the applicable legal provisions.
Security measures
18. Security measures
To protect your personal data from unauthorized access, we have equipped our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" (secure connection layer) and TLS "Transport Layer Security" (transport layer security) and encrypts data communication between a website and the user's end device. You can recognize active SSL or TLS encryption by the small padlock logo that appears at the far left of the browser's address bar.
Your rights
19. Rights of interested parties
In relation to the data processing described above by our company, you have the following rights as an interested party:
Information (Art. 15 GDPR ) You have the right to request confirmation from us as to whether we are processing personal data that concern you. If this is the case, you have the right to information about these personal data and the information detailed in Art. 15 GDPR under the conditions specified in Art. 15 GDPR.
Rectification (Art. 16 GDPR ) You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you and, where appropriate, to complete incomplete personal data.
Deletion (Art. 17 GDPR ) You have the right to demand that we immediately delete the personal data that concern you if one of the reasons listed in Art. 17 GDPR, for example, if your data is no longer necessary for the purposes we pursue.
Restriction of data processing (Art. 18 GDPR ) You have the right to demand that we restrict the processing if one of the conditions listed in Art. 18 GDPR, for example, if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.
Portability of data (Art. 20 GDPR ) You have the right, under the conditions established in Art. 20 GDPR, to request that the data concerning you be provided in a structured, commonly used and machine-readable format.
Revocation of consent (Art. 7 (3) GDPR ) You have the right to revoke your consent at any time in case of treatment based on consent. The revocation applies from the moment it is asserted. In other words, it is effective for the future. Therefore, the withdrawal of consent does not retroactively make the treatment illegal.
Complaint (art. 77 of the RGPD ) If you consider that the treatment of your personal data violates the RGPD, you have the right to file a complaint with a control authority. You can assert this right before a control authority of the EU Member State of your place of residence, your place of work or the place of the alleged infringement.
Prohibition of automated decision-making/profiling (art. 22 of the RGPD ) Decisions that have legal consequences for you or that significantly affect you may not be based solely on the automated processing of personal data, including profiling. We hereby inform you that we do not use automated decision-making, including profiling, in relation to your personal data.
Right of opposition (art. 21 of the RGPD)
If we process your personal data on the basis of article 6, section 1, letter f) of the RGPD (for the protection of superior legitimate interests), you have the right to object to it under the conditions listed in article 21 of the RGPD. However, this only applies if there are reasons related to your particular situation. If you object, we will stop processing your personal data unless we can demonstrate compelling legitimate reasons for the processing that prevail over your interests, rights and freedoms. Nor are we obliged to stop processing them if it serves the formulation, exercise or defense of legal claims. In any case - regardless of the particular situation - you have the right to object at any time to the processing of your personal data for direct marketing purposes.
Status: November 2024