Information about collecting personal data and contact details for the Controller
Director: Jeppe Lund Groth
Data Protection Officer
Konzept 17 GmbH
Tel.: +49 4621 530 40 50
Data collection when visiting our website.
If our website is used for informational purposes only, for example, if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to our server ("server log files"). If you access our website we collect the following data which is technically required in order to display our website:
- Web page visited
- Date and time at point of access
- Volume of data sent in bytes
- Source/referrer from which you were directed to the web page
- Browser used
- Operating system used
- IP address used (in anonymised form, if applicable)
Processing is carried out pursuant to Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not transmitted or otherwise used.
We reserve the right to subsequently check the server log files should specific evidence indicate illegal use.
Hosting and sending emails
The hosting services we use provide the following services: infrastructure and platform services, computing capacity, storage and database services, email dispatch, security services and technical maintenance services which we use for the purposes of operating our online services.
We/our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to these online services on the basis of our legitimate interests in the efficient and secure provision of these online services in accordance with Art. 6 (1) (f) GDPR in conjunction with Art. 28 GDPR (conclusion of a Data Processing Agreem
ONLINE MARKETING AND ANALYSIS
Google Marketing Platform
Google uses a cookie ID to know which ads have been shown in which browser and thus prevent them from being shown more than once. In addition, Google also uses cookie IDs to record conversions, i.e. if a user sees an ad and then later accesses the advertiser's website and purchases something there. Google has stated that these cookies do not contain any personal information.
Your browser automatically establishes a direct connection to Google's servers. We have no influence over the scope and further use of data which is collected by Google through the use of this service. Google has stated that as a result of the integration of this service it receives the information that you have accessed a certain part of our website or have clicked on one of our ads. If you are registered for Google services, Google may associate the visit with your user account. If you are not registered with Google or are not logged in the provider may learn and store your IP address.
Cookies also enable us to understand whether you take certain actions on our website after you have viewed our adverts on Google or on another platform or have clicked on them (conversion tracking) (Floodlight). Google uses these cookies to understand content that you have interacted with on our websites to be able to later send you targeted advertising.
You can prevent tracking by adjusting the relevant settings in your browser software (such as deactivating third party cookies) deactivating cookies for conversion tracking by blocking cookies from the domain www.googleadservices.com in your browsing settings, and via the link for interest-based adverts by providers who are a part of the self-regulating "About Ads" campaign.
Please note that in this case you may not be able to fully use all the functions of our online services.
Further information about the Google Marketing Platform is provided below. More information about the Network Advertising Initiative (NAI) can also be found below.
The legal basis for processing data is Art. 6 (1) (a) GDPR, consent is provided via the cookie banner the first time you visit our website or on later changes made to the cookie settings in your browser.
Google Ads Conversion Tracking
This website uses an online advertising program called Google Ads and as part of this it also uses conversion tracking provided by Google Ltd, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as Google). We use the service provided by Google Ads to draw attention to our attractive services using advertising media on external websites. We are able to determine how successful individual advertising measures using data from the advertising campaigns. We are therefore pursuing our interest in showing you adverts which are of interest to you in order to make our website more interesting for you and to fairly calculate advertising costs.
Conversion tracking cookies are placed when a user clicks on an advert shown by Google. Cookies are small text files which are placed onto your computer. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, both Google and ourselves can recognise that the user has clicked on the advert and has been redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be traced via the websites of Ads customers. The information provided by conversion cookies is used to produce conversion statistics for Ads customers that have opted for conversion tracking. Customers find out the total number of users that have clicked on their advertisement and were directed to a page that includes a conversion tracking tag. However, they are not provided with information that can be used to personally identify users. If you do not wish to participate in tracking, you can block this use by disabling the Google conversion tracking cookie in the user settings of your Internet browser. You will then not be included in the conversion tracking statistics. The legal basis for processing data is Art. 6 (1) (a) GDPR, consent is provided via the cookie banner the first time you visit our website or on later changes made to the cookie settings in your browser.
WEB ANALYSIS SERVICES
Google Analytics (forbliver uændret inditl videre)
This website uses the Google Analytics web analysis tool which is a service provided by Google Ireland Limited. The purpose of using this tool is the needs-based design of this website which is carried out on the basis of balancing interests. The web analysis also allows use to identify and rectify errors on our website, such as broken links.
If you do not agree to the storage and analysis of this data from your visit you can withdraw your consent to the storage and analysis of your data at any time using the following link: [Please insert a link to the Cookie consent policy.]
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. As IP anonymisation is activated on this website and a corresponding Data Processing Agreement has been concluded with Google, your IP address will be truncated by Google within the area of Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
In addition, you can prevent the collection of data generated by the cookie and related to the usage of the website (including your IP address) by Google and the processing of such data by Google by downloading and installing the browser plug-in which is available at: http://tools.google.com/dlpage/gaoptout?hl=en
Google Analytics IP anonymisation
We use IP address anonymisation from Google Analytics on this website. This service has been developed by Google so that this website can adhere to the applicable data protection law and recommendations of the local data protection authorities if these prohibit the storage of complete IP addresses. The IP anonymisation/masking occurs as soon as the IP address arrives in Google Analytics' data capture network and before the data is stored or processed.
More information about IP anonymisation can be found at: https://support.google.com/analytics/answer/2763052?hl=en.
Google Tag Manager
We use Google Tag Manager from Google Inc. on our website. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in Europe. Tag Manager is one of many helpful marketing products from Google. Using Google Tag Manager we can centrally integrate and manage code fragments from various tracking tools that we use on our website.
We would like to clarify precisely what Google Tag Manager does, why we use it and in what format data is processed.
Tag Manager itself is a domain that does not place any cookies or store any data. It merely manages the implemented tags. The data is collected by the individual tags of various web analysis tools. The data is not stored by Google Tag Manager which guides the data to the individual tracking tools.
The account settings of Google Tag Manager have been set up to allow Google to receive anonymised data from us. This only relates to the use and usage of our Tag Manager and not to the data that is stored via the code fragments. We have enabled Google and other companies to obtain selected data in anonymised format. We agree to the anonymous transfer of our website data. Despite copious research we have not been able to find out exactly what summarised and anonymised data is transferred. In any case Google erases all information which could identify our website. Google summarises the data with data from hundreds of other websites and compiles user trends as part of benchmarking measures. Benchmarking compares our own results with those of competitors. Processes may be able to be optimised as a result of the information collected.
When Google stores data this is stored on Google's own servers. These servers are located all around the world. Most are found in the USA. More information about the locations of Google's servers can be found at: https://www.google.com/about/datacenters/inside/locations/?hl=en
Please note that when using these tools your data may also be stored and processed outside of the EU. The data protection regime of most third countries outside of the EU (including the USA) is currently not considered secure by European data protection law. Data must not be simply transferred to, stored or processed in insecure third countries without suitable guarantees (such as EU standard contractual clauses) having been entered into between ourselves and the non-EU service provider.
The use of Google Tag Manager requires your consent which is obtained via our cookie pop-up. This consent is the legal basis for the processing of personal data in accordance with Art. 6 (1) (a) GDPR (consent) which may occur during the collection of data by web analysis tools.
In addition to consent we also require a legitimate interest in analysing the behaviour of visitors to our website and in technically and commercially improving our services. Google Tag Manager helps us make our services more efficient. The legal basis for this is Art. 6 (1) (a) GDPR (legitimate interest). Nevertheless, we only use Google Tag Manager if you have given your consent.
Google also processes data in the USA and other countries. Please note that the Court of Justice of the European Union has assessed that currently there is an inadequate level of protection to transfer data to the USA. This may result in various risks to the lawfulness and security of data processing.
For more information about Google Tag Manager please see the FAQ at: https://support.google.com/tagmanager/?hl=en#topic=3441530
Google Web Fonts
We use fonts from Google (Google Fonts) on our website. These Web Fonts are integrated using a local server in the EU. No personal data is transferred to Google servers when accessing Google Fonts (provided your device supports these fonts). If your device does not support these fonts it will use its standard fonts.
Facebook (Next certification due date 14 December 2022)
We use social plug-ins ("plug-ins") of the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), on the basis of our legitimate interests (i.e. our interests in analysing, optimising and efficiently operating our online services within the meaning of Art. 6 (1) (f) GDPR).
This includes content such as images, videos, text and buttons with which the user can share the content of our online services within Facebook. A list and the appearance of Facebook's social plug-ins can be viewed at: https://developers.facebook.com/docs/plugins/.
Facebook is certified according to the EU-US Privacy Shield and therefore offers a guarantee that European data protection law will be adhered to https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active
If a user accesses a part of our online services which contains such a plug-in your device establishes a direct connection to the Facebook servers. The content of the plug-in is directly sent from Facebook to the user's device and incorporated into the online services. User profiles may be created from the processed data. We have no influence over the scope of data collected by Facebook using these plug-ins and provide information to users according to the level of our knowledge.
Through the integration of the plug-in Facebook obtains the information that a user has accessed the corresponding page of the online services. If the user is logged in Facebook can associate the visit with your Facebook account. If users interact with the plug-in, for example by using the Like button or adding a comment, the corresponding information from their device is directly transferred to Facebook and stored there. If the user is not a member of Facebook there is still a chance that Facebook learns and saves their IP address. According to Facebook, in Germany only an anonymised IP address is saved.
If a user is a member of Facebook and does not wish for Facebook to collect data about them via our online services and link this to their membership information stored by Facebook they must log out of Facebook and erase their cookies before using our online services. Further settings and methods to object to the use of data for advertising purposes can be found in Facebook's profile settings: https://www.facebook.com/settings?tab=ads or on the US website: http://www.aboutads.info/choices/ or the EU website: http://www.youronlinechoices.com/.
The settings are platform independent, i.e. the same for all devices such as a desktop computer or a mobile device.
2. PURPOSE OF PROCESSING
Processing the information should firstly enable Facebook to improve its system of advertising which it disseminates via its network. Secondly, it enables us as the operator of the Instagram page to obtain statistics generated by Facebook as a result of you visiting our Instagram page. The purpose of this is to manage the marketing of our activities. For example, this allows us to obtain information from the profiles of visitors who view our Instagram page or use the functions of the page to be able to provide you with relevant content and to develop functions which could be of great interest to you.
The information collected will also be analysed demographically and geographically and made available to us so that we can better understand how we can best achieve our goals with our Instagram page. We may use this information to place targeted interest-based adverts without having direct knowledge of the identity of the visitor. If visitors use Facebook on multiple devices the storage and evaluation may also take place across multiple devices if the visitor is registered and logged in to their own profile.
The compiled visitor statistics are solely transferred to us in anonymised format. We have no access to the underlying data.
3. LEGAL BASIS AND LEGITIMATE INTERESTS
We operate this Instagram page to showcase ourselves to the users of Instagram and other interested persons who visit our Instagram page and to communicate with them. Processing of users' personal data is carried out on the basis of our legitimate interests in optimising our company profile (Art. 6 (1) (f) GDPR).
4. TRANSFER OF DATA
It is possible that some of the information collected is also processed outside the European Union by Facebook Inc., whose registered office is in the USA. Facebook Inc. is certified under the Privacy Shield between the U.S. and the EU and is thus required to observe EU privacy regulations.
We ourselves do not disclose any personal data.
Instagram users are able to influence to what extent their user behaviour is collected when visiting our Instagram page using the ad preferences settings. Further options are available in the Facebook and Instagram settings at:
or the opt-out form at:
Information may not be able to be processed using cookies placed by Facebook due to browser settings that prevent the placement of third-party or Facebook cookies.
6. NATURE OF SHARED RESPONSIBILITY
The agreements entered into with Facebook, including those on shared responsibility, essentially state that it is sensible for access requests and requests to assert rights as the data subject to be submitted directly to Facebook. Only Facebook has direct access to the required information and can directly take any required measures and provide information as it is the provider of the social network and because it is possible to integrate Facebook pages there. If our support is still required please feel free to contact us at any time.
Data processing on opening a customer account and implementing the contract – Skulle dette ikke udgå eller husker jeg forkert? J
Personal data is collected and processed in accordance with Art. 6 (1) (b) GDPR when you provide us with this data to implement a contract or open a customer account. The data collected is discernible from the respective input forms. Your customer account may be deleted at any time by sending a message to the above address of the controller. We store and use the data you provide us with to implement the contract. After the contract has been implemented in full or your customer account has been deleted your data will be blocked considering any retention periods applicable under fiscal and/or commercial law and erased after the expiry of these retention periods provided you have not expressly consented to the further use of the data or we are permitted by law to continue processing data, which we will inform you about accordingly below.
Purpose of processing
In accordance with Art. 6 (1) (a) GDPR – consent of the data subject
In accordance with Art. 6 (1) (b) GDPR – performing contracts, carrying out pre-contractual measures
In accordance with Art. 6 (1) (f) GDPR – legitimate interest (effective, secure payment options)
Types of data processed by the payment provider
Inventory data such as name and address
Banking data such as account number, credit card numbers, passwords, TAN numbers and checksums, recipient-related information
This information is required to process transactions and is only collected and stored by the payment provider.
We do not receive any account/credit card-related information, merely confirmation whether the payment was confirmed or declined.