Thank you for visiting our website and for your interest in our business. Protecting your personal data is important to us. Personal data means information about the personal or material circumstances of an identified or identifiable natural person. This includes information such as a person’s legal name, address, telephone number and date of birth.
As these data require particular protection, we collect them only to the extent technically necessary. Below, we explain what information we collect during your visit to our website and how it is used.
Our data protection practices comply with the provisions of the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). We collect, process and store your personal data solely to handle enquiries and, where applicable, to process orders or contracts. Your data will be used for additional purposes, such as information about offers in a newsletter, only if you have previously given separate consent specifying those purposes.
1. Controller within the meaning of section 13(1) TMG / section 3(7) BDSG
The controller for the purposes of data protection law is:
Guido Steinberg – Royal X – Proprietor: Guido Steinberg
Johann-Sebastian-Bach-Str. 25
34134 Kassel
Email: kontakt@royal-x.de
Telephone: + 49 0561 94157790
2. Anonymous / pseudonymised use of the website
You can generally visit our website without providing personal data. Pseudonymised usage data are not combined with information identifying the person behind the pseudonym. We do not create pseudonymous usage profiles.
3. Special website functions
Our website offers various functions involving the collection, processing and storage of personal data. Below, we explain what happens to these data:
* Contact form(s):
We use data collected through our contact form or forms solely to handle enquiries submitted through those forms. Once an enquiry has been processed, the data collected are deleted without undue delay unless statutory retention requirements apply.
4. Disclosure of data / purpose limitation
We disclose personal data to third parties only where necessary to fulfil our contractual obligations, in particular to perform a concluded contract. Personal data are not disclosed to third parties for purposes other than the contract and payment processing described above.
If you provide personal data on the basis of express consent, those data are used solely for the purpose underlying that consent and agreed to by you in advance. We store your personal data only for as long as necessary for the intended purpose of collection or as required by law. You may withdraw your consent at any time.
Your legitimate interests are taken into account in accordance with statutory provisions. You may request information from the controller about the data stored concerning you.
5. Statistical analysis of visits to this website
When this website or individual files on the website are accessed, we collect, process and store the following data: IP address, the website from which the file was accessed, file name, date and time of access, volume of data transferred and notification of whether access was successful (a web log). We use these access data exclusively in a non-personalised form to improve our online services continuously and for statistical purposes.
6. External content and/or processing of data outside the EU
We use active JavaScript content from external providers on our website. When you visit our website, these external providers may receive personal information about your visit. Data may be processed outside the EU. You can prevent this by installing a JavaScript blocker such as the NoScript browser extension (www.noscript.net) or by disabling JavaScript in your browser. This may limit the functionality of websites you visit.
Specifically, we use:
* Amazon S3:
Our website loads JavaScript code from Amazon Web Services, Inc., 1200 12th Ave. South, Ste. 1200, Seattle, WA 98144-2734, USA (Amazon S3). If JavaScript is enabled in your browser and you have not installed a JavaScript blocker, your browser may transfer personal data to Amazon S3. We do not know which data Amazon S3 combines with the information received or for what purposes Amazon S3 uses those data. Further information is available in the Amazon S3 privacy policy: http://aws.amazon.com/de/privacy/?nc1=f_pr . To prevent Amazon S3 JavaScript code from running entirely, you can install a JavaScript blocker (for example, www.noscript.net or www.ghostery.com).
* Facebook:
Our website loads plugins from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Facebook). If scripts are enabled in your browser and you have not installed a script blocker, your browser will transfer personal data to Facebook without asking separately. If you are logged in, the data can be directly associated with your Facebook profile. We do not know which data Facebook combines with the personal data received or for what purposes Facebook uses those data. Further information is available in Facebook’s privacy policy (https://www.facebook.com/about/privacy/). If you do not want Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook account and block Facebook scripts in your browser, for example using script blockers from www.noscript.net or www.ghostery.com.
* Facebook Connect / Login:
Our website uses Facebook Connect, a service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Facebook). Signing in using the Facebook Connect button transfers personal data to Facebook. We do not know which data Facebook combines with the personal data received or for what purposes Facebook uses those data. Further information is available in Facebook’s privacy policy (https://www.facebook.com/about/privacy/). If you do not want Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook account and block Facebook JavaScript content in your browser, for example using JavaScript blockers from www.noscript.net or www.ghostery.com.
* Facebook Social Graph:
Our website loads plugins from Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (Facebook). If scripts are enabled in your browser and you have not installed a script blocker, your browser will transfer personal data to Facebook without asking separately. If you are logged in, the data can be directly associated with your Facebook profile. We do not know which data Facebook combines with the personal data received or for what purposes Facebook uses those data. Further information is available in Facebook’s privacy policy (https://www.facebook.com/about/privacy/). If you do not want Facebook to associate your visit to our website with your Facebook account, please log out of your Facebook account and block Facebook scripts in your browser, for example using script blockers from www.noscript.net or www.ghostery.com.
* Provenexpert.com:
Our website loads JavaScript code from Expert Systems GmbH, Quedlinburger Straße 1, 10589 Berlin, Germany (referred to below as provenexpert.com). If JavaScript is enabled in your browser and you have not installed a JavaScript blocker, your browser may transfer personal data to provenexpert.com . We do not know which data provenexpert.com combines with the information received or for what purposes provenexpert.com uses those data. Further information is available in the privacy policy of provenexpert.com: https://www.provenexpert.com/de/datenschutzbestimmungen. To prevent JavaScript code from provenexpert.com running entirely, you can install a JavaScript blocker (for example, www.noscript.net or www.ghostery.com).
* Vimeo:
Our website loads JavaScript code from Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA (Vimeo). We use Vimeo to embed videos on our website. If JavaScript is enabled in your browser and you have not installed a JavaScript blocker, your browser may transfer personal data to Vimeo. We do not know which data Vimeo combines with the information received or for what purposes Vimeo uses those data. Further information is available in Vimeo’s privacy policy (http://vimeo.com/privacy). To prevent Vimeo JavaScript code from running entirely, you can install a JavaScript blocker (for example, www.noscript.net or www.ghostery.com).
7. Information about the use of cookies
We use cookies on various pages to make visiting our website more convenient and to enable certain functions. Cookies are small text files that your browser can store on your computer. Storing a cookie file is also referred to as setting a cookie. You can configure your browser to notify you when cookies are set, to decide whether to accept them on a case-by-case basis, or to accept or reject cookies generally. Cookies may serve different purposes, for example recognising that your computer has previously connected to a website (persistent cookies) or storing recently viewed offers (session cookies). We use cookies to make our website more convenient for you. To use these convenience functions, we recommend allowing cookies for our website.
8. Google Tag Manager
What personal data are collected and to what extent are they processed?
Our website uses a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (referred to below as Google Tag Manager). Google Tag Manager provides a technical platform for running and centrally managing other web services and web-tracking programmes using tags. In this context, Google Tag Manager stores cookies on your computer and analyses your browsing behaviour where web-tracking tools are run through Google Tag Manager (tracking). Data sent by individual tags integrated into Google Tag Manager are consolidated, stored and processed through a unified interface. All integrated tags are listed separately in this privacy policy. Further information on the data protection practices of tools integrated into Google Tag Manager is provided in the relevant section of this privacy policy. When you use our website with Google Tag Manager tags enabled, data, in particular your IP address and user activities, are transmitted to servers of Google Ireland Limited and processed and stored outside the European Union, for example in the USA. The European Commission has determined that an adequate level of data protection may exist in the USA where the data-processing company has committed to the US–EU Privacy Shield agreement and data exports to the USA are structured lawfully on that basis. This applies to Google Ireland Limited. The provisions of the relevant section of this privacy policy apply to the web services integrated through Google Tag Manager. The tracking tools used in Google Tag Manager anonymise IP addresses in the source code to ensure that your IP address is anonymised before transmission. This enables Google Tag Manager to collect IP addresses only in anonymised form (IP masking).
Legal basis for processing personal data
The legal basis for processing data is your consent under Article 6(1)(a) GDPR, given through our notice banner concerning the use of cookies and web tracking (consent through a clear affirmative action or behaviour).
Purpose of processing
On our behalf, Google uses information obtained through Google Tag Manager to evaluate your visit to this website, compile reports on website activities and provide us with other services relating to website and internet use.
Storage period
Google stores data relevant to the operation of Google Tag Manager for as long as necessary to provide the requested web service. Data are collected and stored anonymously. If data nevertheless relate to an identifiable person, they are deleted without undue delay unless statutory retention obligations apply. In all cases, data are deleted when the retention obligation expires.
Options to object and request deletion
You can prevent the collection and transfer of personal data to Google, particularly your IP address, and Google’s processing of those data by disabling script code in your browser, installing a script blocker or enabling your browser’s Do Not Track setting. You can also prevent Google from collecting data generated by the Google cookie concerning your use of the website, including your IP address, and from processing those data by downloading and installing the browser extension available at the following link http://tools.google.com/dlpage/gaoptout?hl=de . Google’s security and privacy principles are available at [https://policies.google.com/privacy]
Google Analytics
Scope of personal data processing
Our website uses the web-tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (referred to below as Google Analytics). As part of web tracking, Google Analytics uses cookies stored on your computer to analyse your use of our website and your browsing behaviour (tracking). We carry out this analysis using Google Analytics to optimise our online services continuously and improve their availability. When you use our website, data, particularly your IP address and user activities, are transmitted to servers of Google Ireland Limited. We carry out this analysis using Google’s tracking service to optimise our online services continuously and improve their availability. We also require web tracking for security reasons. It allows us to identify whether third parties are attacking our website. Information from the tracker enables us to take effective countermeasures and protect the personal data we process against these cyberattacks. IP anonymisation is enabled in this website’s Google Analytics tracking code so that Google Analytics anonymises your IP address before transmission. This website uses Google Analytics tracking code extended by the operator gat._anonymizeIp(); to enable IP addresses to be collected only in anonymised form (IP masking).
Legal basis for processing personal data
The legal basis for processing data is your consent under Article 6(1)(a) GDPR, given through our notice banner concerning the use of cookies and web tracking (consent through a clear affirmative action or behaviour).
Purpose of processing
On our behalf, Google uses this information to evaluate your visit to this website, compile reports on website activities and provide us with other services relating to website and internet use. We also require web tracking for security reasons. It enables us to identify whether third parties are attacking our website. Information from the tracker allows us to take effective countermeasures and protect the personal data we process against these cyberattacks.
Storage period
Google stores data relevant to providing web tracking for as long as necessary to provide the requested web service. Data are collected and stored anonymously. If data nevertheless relate to an identifiable person, they are deleted without undue delay unless statutory retention obligations apply. In all cases, data are deleted when the retention obligation expires.
Options to object and request deletion
You can prevent the collection and transfer of personal data to Google, particularly your IP address, and Google’s processing of those data by disabling script code in your browser or enabling your browser’s Do Not Track setting. You can also prevent Google from collecting data generated by the Google cookie concerning your use of the website, including your IP address, and from processing those data by downloading and installing the browser extension available at the following link (http://tools.google.com/dlpage/gaoptout?hl=de). Google’s security and privacy principles are available at https://policies.google.com/privacy?hl=de.
9. Data security and data protection; communication by email
Technical and organisational measures protect your personal data during collection, storage and processing against access by third parties. We cannot guarantee complete data security for communication by email, so we recommend using the postal service for highly confidential information.
10. Withdrawal of consent – requests for information and changes – deletion and blocking of data
Under the German Federal Data Protection Act, you have the right to receive information free of charge about your stored data and, where applicable, the right to have those data rectified, blocked or deleted. Your data will then be deleted unless legal provisions prevent this. You may withdraw permission for us to use your personal data at any time. You may send requests for information, deletion or rectification of your data, as well as suggestions, to the following address at any time:
Guido Steinberg – ROYAL X – Proprietor: Guido Steinberg
Johann-Sebastian-Bach-Str. 25
34134 Kassel
Email: kontakt@royal-x.de
Telephone: + 49 0561 94157790
Prepared by:
© IT-Recht-Kanzlei DURY – www.dury.de
© Website-Check GmbH – www.website-check.de