We are pleased that you are visiting our website and the associated sub-pages (hereinafter collectively referred to as the “website” or “website”) and thank you for your interest in our company and our products and services. The protection of your privacy when using our website is important to us. Therefore, please take note of the following information:
The protection of your privacy when processing personal data is an important concern for us, which we take into account in our business processes. As a matter of principle, we only process personal data to the extent that this is necessary to provide a functioning website, to contact you via the e-mail addresses provided on our website and to provide our content and services.
Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (“DSGVO”) serves as the legal basis. When processing personal data that is necessary for the performance of a contract, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
The personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator. Data will also be blocked or deleted if a prescribed storage period expires, unless there is a need to continue storing the data for the conclusion or fulfilment of a contract.
Personal data will only be transferred to state institutions and authorities within the framework of mandatory national legal provisions. Our employees are obliged by us to maintain confidentiality.
Collection, processing and use of personal data on our website
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
- Information about the browser type and version used,
- The user’s operating system,
- The user’s internet service provider,
- The user’s IP address,
- Date and time of access,
- Websites from which the user’s system accesses our website,
- Websites accessed by the user’s system via our website.
The log files contain IP addresses or other data that enable an assignment to a user. This could be the case, for example, if the link to the website from which the user arrives at the Internet site or the link to the website to which the user goes contains personal data.
This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
Storage may also take place if this has been provided for by the European or national legislator. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. This purpose is also our legitimate interest in data processing according to Art. 6 Para. 1 lit. f DSGVO.
With the exception of the IP address, personal data is only stored if you provide it to us voluntarily.
Collection and processing of personal data when contacting us via contact form or e-mail
Our website contains a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the input mask is transmitted to us and stored. The following data is also stored at the time the message is sent:
- The IP address of the user,
- Date and time of registration,
- website URL on which contact details are entered,
- data provided by the customer via the contact form.
For the processing of the data, your consent is obtained during the submission process and reference is made to this data protection declaration.
Alternatively, it is possible to contact us via the e-mail addresses provided. In this case, the user’s personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation. The processing of the personal data from the input mask serves us solely to process the contact.
The other personal data processed during the submission process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended, i.e. when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. The additional personal data collected during the sending process is deleted after a period of seven days at the latest.
The legal basis for the processing of this data is Art. 6 para. 1 lit. a DSGVO if the user has given his or her consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f DSGVO. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.
Transfer of personal data
Clearlight Saunas Europe GmbH will treat your personal data confidentially. It will only be passed on to third parties if we are legally obliged to do so or if we commission an external service provider, e.g. the transport company commissioned with the delivery or a payment service, to process your information. These service providers only receive the information required to fulfil their tasks. They are not allowed to use it for other purposes and are obliged to treat the information in accordance with the DSGVO and the Federal Data Protection Act. We also conclude appropriate confidentiality agreements and, where applicable, commissioned data processing agreements with each partner. In all other cases, we will inform you if personal information is to be passed on to third parties, thus giving you the opportunity to give your consent.
In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. When a user calls up our website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies to recognise your browser on your next visit (persistent cookies). You can set your browser in such a way that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be limited.
The legal basis for the processing of personal data using cookies is Art. 6 (1) lit. f DSGVO.
Collection and processing of personal data when contacting us via tawk.to
This website uses tawk.to, a live support application of tawk.to, Inc.
tawk.to uses “cookies”, which are text files placed on your computer, to help the tawk.to website provide the best possible user experience. The information generated by the cookie about your use is usually transmitted to a Google server in the USA and stored there.
The legal basis for the use of tawk.to is Art. 6 para 1 p. 1 lit. a and lit. f DSGVO.
This website uses Snipcart Inc., 226 Rue Saint-Joseph E, Québec, QC G1K 3A9, Canada, a shopping cart integration service for the order process for our online shop.
When you place an order in our online shop, we collect the following data from you: First name, last name, street, postcode, city, country, telephone number if applicable, e-mail address, selected shipping method, selected payment method and an individual text note if applicable. It is not necessary to provide a telephone number and text note.
The data you provide is required for the fulfilment of the contract or for the processing, execution and settlement of your purchase. No data is transmitted to third parties, with the exception of the transmission of relevant data to the processing payment service provider for the purpose of debiting the purchase price, to the transport company/shipping company commissioned by us for the delivery of the goods and to our tax advisor for the fulfilment of our tax obligations.
We store the data you disclose when placing your order, unless we are legally obliged to store it for a longer period (e.g. by the regulations on invoicing), only for as long as necessary - in principle until the end of the statutory period for claims arising from the purchase contract. In the case of your consent or due to a legitimate interest, we store them beyond this period.
The legal basis for the processing of your data is § 96 para 3 TKG as well as Art 6 para 1 lit a (consent) and/or lit b (necessary for the performance of the contract) of the DSGVO.
Encrypted payment transactions
The entire ordering process is carried out exclusively via an encrypted SSL connection. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” or by the lock symbol in your browser bar. With encrypted communication, your payment data cannot be read by third parties.
This website uses, among others, Stripe, Inc., 510 Townsend Street San Francisco, CA 94103, USA, a service that enables payment processing in the online shop.
During the ordering process, information relevant to the processing of your payment (name, address, credit card number, invoice amount, currency, etc.) is passed on to the payment service provider Stripe.
The transfer of your data to Stripe is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). Your data will only be passed on for the purpose of processing the payment. You can find more information on Stripe’s data protection at URL https://stripe.com/en-au/privacy.
This website offers, among other things, payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
As part of the ordering process, information relevant to the processing of the payment about your order (name, address, credit card number, invoice amount, currency, etc.) is passed on to the payment service provider PayPal.
The transfer of your data to PayPal is based on Art. 6 para. 1 lit. a DSGVO (consent) and Art. 6 para. 1 lit. b DSGVO (processing for the performance of a contract). Your data will only be passed on for the purpose of processing the payment. You can find more information on Paypal’s data protection at the URL paypal.com/privacy.
Use of Google Adwords Conversion Tracking
This website uses the online advertising programme “Google Adwords” and, as part of Google Adwords, conversion tracking. We use Google Adwords to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your computer system. These cookies lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Adwords customer receives a different cookie. Cookies can therefore not be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information. The information obtained with the help of the conversion cookie is used to create conversion statistics for Adwords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of Adwords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
You can prevent participation in this tracking process in various ways: a) by adjusting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving any third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”, <https://www.google. en/settings/ads>, which setting will be deleted when you delete your cookies; c) by disabling the interest-based ads of the providers that are part of the self-regulatory campaign “About Ads” at the link http://www.aboutads.info/choices, which setting will be deleted when you delete your cookies; d) by permanently disabling them in your Firefox, Internetexplorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the processing of your data is Art. 6 para 1 p. 1 lit. f DSGVO. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Use of social plugins and embedding links
We do not use social media plugins on our website. If our website contains icons from social media providers (e.g. Twitter, Facebook, Instagram, Pinterest, Houzz, YouTube), we only use these to passively link to the pages of the respective providers.
We also use other symbols embedded on our website, such as the kununu symbol or embedded links to Personio or to websites on which studies are located, only for passive linking to the pages of the respective providers.
We have embedded YouTube videos in our online offer, which are stored on http://www.YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transmitted. We have no influence on this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site. The data obtained from this is used to optimise our website and advertising measures. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. \
Please note that this website uses Google Analytics with the extension “_anonymizeIp()” and that IP addresses are therefore only processed in abbreviated form, which means that they cannot be linked to a specific person. If the data collected about you is personally identifiable, this is immediately excluded and the personal data is deleted immediately. We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis for the use of Google Analytics is Art. 6 para 1 p. 1 lit. f DSGVO.
Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the data protection declaration: http://www.google.de/intl/de/policies/privacy.
Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tag Manager itself does not set cookies but only tags and does not collect any personal data. The service triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.
However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The legal basis for the use of Google Tag Manager is Art. 6 para 1 p. 1 lit. f DSGVO.
Google also processes your personal data in the US and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The advertised goods and services are named in the declaration of consent.
For the subscription to our newsletter we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.
Only your e-mail address is required for sending the newsletter. The provision of further, separately marked data is voluntary and will be used to address you personally. After your confirmation, we store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 p. 1 lit. a DSGVO.
You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email, by email to firstname.lastname@example.org or by sending a message to the contact details provided in the imprint.
Information about customer rights and contacts
Responsible person according to Art. 4 No. 7 DSGVO is Clearlight Saunas Europe GmbH (see our imprint). You can reach our data protection officer at email@example.com or our postal address with the addition “the data protection officer”.
You have a right to free information about your stored data. In addition, you are entitled to have this data corrected or completed if necessary, should it prove to be incorrect or incomplete, and furthermore, if applicable - provided the respective conditions are met - to make use of your right to restrict the processing of your data or to demand the deletion of your personal data. This does not apply if storage is required by law. If deletion cannot be carried out, data processing will be restricted. Your request should be sent to the following contact details:
Clearlight Saunas Europe GmbH.
You also have the right to object at any time to the processing of personal data concerning you. This does not apply to data whose collection is absolutely necessary for the provision and operation of the website. If you have contacted us by e-mail, you can also object to the storage of your personal data at any time. In such a case, the conversation cannot be continued and all personal data stored in the course of contacting us will be deleted in this case. After receiving your objection, we will no longer use, process or transmit the data concerned for purposes other than the processing of concluded contracts. The lawfulness of the processing carried out up to the revocation remains unaffected by this. If you wish to object to the collection, processing or use of your data by Clearlight Saunas Europe GmbH in accordance with these data protection provisions, either in whole or in respect of individual measures, you can also send your objection by e-mail, fax or letter in this case to the following contact details:
Clearlight Saunas Europe GmbH