I. Who is the controller and how can I contact the Data Protection Officer?
The controller within the meaning of the GDPR is
validio GmbH & Co. KG
Pretzfelder Straße 13
Nuremberg Commercial Register HRA 12160
Managing Director: Dipl.-Kfm. Michael Oschmann
Please contact our Data Protection Officer Dr. Stefan Drewes, who you can reach at the address in the imprint or at the following email address: email@example.com, for any questions you may have about how we process your personal data or about data protection in general.
II. Your rights as a data subject
Each data subject has the following rights:
• Right of access (Article 15 of the GDPR);
• Right to rectification of incorrect data (Article 16 of the GDPR);
• Right to erasure/‘right to be forgotten’ (Article 17 of the GDPR);
• Right to restriction of processing personal data (Article 18 of the GDPR); and
• Right to data portability (Article 20 of the GDPR).
You can object to the processing of personal data for the purposes of marketing, including the analysis of customer data for marketing purposes, at any time without stating any reasons for this.
The data subject also has a general right to object (see Article 21 Paragraph 1 of the GDPR). In this case, reasons must be given for the objection to data processing. If data processing is based on consent, your consent may be withdrawn at any time with future effect.
To exercise data subject rights, the easiest option is to contact firstname.lastname@example.org. Otherwise, please use the address in our imprint. You also have the right to complain to data protection supervisory authorities responsible for you.
III. Processing of personal data by validio GmbH & Co. KG
We would like to give you an overview below of how we guarantee that your personal data is protected against access when you visit our website, and what types of personal data we process for what purposes and to what extent.
1. Processing personal data
The Clever Dialer website allows users to submit comments about individual phone numbers. The following data is stored when a comment is submitted:
- Rating (stars)
- Reason for call
- Email address
- IP address
The IP address is stored to prevent misuse and attacks and is deleted after 7 days.
2. Processing data when accessing our website – log files
When you access our website, general information is automatically collected. This information (server log files) includes the type of web browser, the operating system used, the domain name for your internet service provider and other similar information. The IP address is also sent and used for the service requested by you. This information is required for technical reasons in order to be able to provide you with the website content you have requested, and is mandatory when using the internet.
Based on our IT security concept, the resulting log file data is saved for a period of 28 days in order to recognise and analyse any attacks against our website. The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f) of the GDPR.
3. Processing data when accessing our website – your enquiries
If you send us an enquiry by email or via the contact form, we collect the data you share in order to process it and respond to your concern. We save this information for a period of up to two years for evidence purposes. The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
4. Notes on guaranteeing data security
We take technical and operational security precautions on our website to protect the personal data saved by us against third-party access, loss or misuse, and to facilitate secure data transfer.
Please note that due to the structure of the internet, it is possible for there to be unauthorised access to data by third parties. You are therefore responsible for protecting your data from misuse using encryption or other means. If appropriate security measures aren’t taken, unencrypted transmitted data in particular can be read by third parties, even if such data is sent by email.
IV. Integration of external services
1. AdThis integration
Our web pages also include AddThis plug-ins, a service from AddThis LLC, 1595 Spring Hill Road, Sweet 300, Vienna, VA 22182, USA (‘AddThis’). These plug-ins allow you to use bookmarks and share interesting content with other users. The legal basis for using plug-ins is Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
Your web browser will establish a direct connection with the AddThis servers via these plug-ins and, where applicable, the chosen social network or bookmarking service. The data collected within this context (e.g. time of use, browser type, etc.) is stored on the AddThis servers in the USA and processed by them. If you send content from our website to social networks or bookmarking services, the visit to our website may be associated with your user profile on the respective network. The data collected via the corresponding technologies is not used to personally identify you as a user of this website. We only receive statistical evaluations that we can use to improve our website. We have no control over the data collected and the data processing processes, nor do we know the full extent of data collection, the purposes of processing or the storage periods. We also do not receive information concerning the erasure of data collected by the plug-in provider.
The plug-in provider stores your data as a use profile and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation particularly takes place (even for users who aren’t signed in) to provide needs-based advertising and to inform other social network users about your activities on our website. You have a right to object against this user profile being created, whereby you must object to the respective plug-in provider.
If you don’t want to take part in this process, you can object to data collection and storage at any time by using an opt-out cookie with effect for the future: http://www.addthis.com/privacy/opt-out/. Alternatively, you can change your browser settings to prevent cookies from being used. Please note that if you do so, you may not be able to use the functions and services of this website in full. You can also find more information about data protection at AddThis here: www.addthis.com/privacy.
1. General information about using cookies
Our website uses ‘cookies’. Cookies are small text files that are placed on your end device and saved by your browser. They are used to make our website more user-friendly, effective and secure. We also use ‘temporary cookies’ that are automatically deleted when you close your browser (‘session cookies’), as well as persistent cookies.
When using cookies, a distinction must be made between mandatory cookies and cookies for other purposes (measuring page views, advertising purposes).
2. Mandatory cookies when using the website
We use session cookies on our websites, which are required for you to be able to use our websites. This includes cookies that allow us to recognise you again when you visit the site as part of a single session. These session cookies contribute to the secure use of our website by allowing the shopping cart function and the payment process to work in a secure way.
3. Using cookies with your consent
Below we will provide you with an overview about the cookies below which are used by us with the consent you provide when you start using our website. Each time you are notified of cookies being used, you also have an opt-out option. These are cookies that record our website’s use behaviour as well as cookies that are used for advertising purposes.
a. Using cookies to record use behaviour (tracking)
Using tracking cookies allows us to recognise when users visit our website again and to assign an internal identifier (pseudonym) to use processes. This allows us to record repeat visits to our website and to analyse them in a coherent way.
Specifically, the following tracking cookies are used:
Tracking by Google Analytics
This website uses Google Analytics, a web analysis service from Google Inc. (‘Google’). Google Analytics uses ‘cookies’, text files that are saved on your computer and allow website use to be analysed. Information collected by the cookie about your use of this website is generally sent to a Google server in the USA and saved there. Due to the activation of IP anonymisation on this website, your IP address is truncated by Google within the European Union Member States or in other signatory states to the Agreement on the European Economic Area before it is sent. A full IP address is only sent to a Google server in the USA and truncated there in exceptional cases. We instruct Google to use this information to evaluate your use of the website, to compile reports about website activities and to provide other services to us that relate to website and internet use. The IP address sent from your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being saved by changing your browser settings; please note that in this case, you may not be able to use all of this website’s functions in full. You can also prevent the data generated by the cookie relating to your use of the website (inc. your IP address) from being captured and processed by Google by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
We use Google Analytics to analyse the use of our website and to make regular improvements. We are able to use these statistics to improve our offering and create designs that are more interesting for users. In the exceptional cases where personal data is sent to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for saving cookies is consent (Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR). Further evaluation of the data collected by Google Analytics takes place over a period of 26 months, based on Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
You can also find more information about this at http://tools.google.com/dlpage/gaoptout?hl=de or at https://www.google.de/intl/de/policies/privacy/.
(general information about Google Analytics and data protection).
b. Using cookies for advertising purposes
The following cookies are specifically used:
Using Adsense by Google
This website uses the online advertising service Google AdSense, through which adverts can be shown to interested parties. We’re interested in showing you adverts that might be of interest to you, so that the website is more interesting for you. In doing so, statistical information is collected about you which is processed by our advertising partners on various different websites. These adverts can be recognised by the ‘Google advert’ note that appears in each advert.
When you visit our website, Google will be notified of this. Google then uses a web beacon to save a cookie on your computer. The data specified in Section 3 of this policy is transmitted. We have no influence over the data collected, nor do we know the full extent of data collection or what the storage period is. Your data is sent to the USA and evaluated there. If you are logged into your Google account, your data can be directly associated with it. If you don’t want a link to be made with your Google profile, you must sign out of Google first. This data may be shared with Google contracting partners, third parties and authorities. The legal basis for data processing is Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. This website does not display adverts from third-party providers via Google AdSense.
If you do not want adverts to be shown that are tailored to your interests, you can deactivate cookies in your browser or you can inform Google of this via the following link with future effect: https://www.google.com/settings/ads/onweb/. Alternatively, you can object to Google Retargeting via the Network Advertising Initiative (NAI)’s website: http://optout.networkadvertising.org.
You can also find more information about the purpose and scope of data collection and the processing of data, as well as more information about your rights regarding this and settings options to protect your privacy from: Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; data protection provisions for advertising: http://www.google.de/intl/de/policies/technologies/ads. Google is subject to the EU-US privacy shield, https://www.privacyshield.gov/EU-US-Framework.
Sharing data for error analysis
This website uses Rollbar, an error analysis tool from Rollbar Inc., 51 Federal St Ste 401, San Francisco, CA 94109, USA. Using a ‘Wordpress plug-in’, the Rollbar tool is able to send data from errors on the website, e.g. crashes, to Rollbar. Information collected about this website’s error behaviour is generally sent to a Rollbar server in the USA and saved there. The following information is sent:
- website status information;
- page views that resulted in the error;
- anonymised IP address;
- the browser type used; and
- cookies sent.
We instruct Rollbar to use this information to evaluate error behaviour and to compile reports about website issues.
We use Rollbar to analyse the error behaviour on our website and to be able to resolve any errors that occur quicker. We are able to use the information from this to improve our website and create a more positive user experience for you as a user. In exceptional cases where personal data is sent to the USA, Rollbar is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Further evaluation of the data collected by Rollbar takes place over a period of 26 months. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.
You can deactivate data being sent to Rollbar here.
You can also find more information about this at https://rollbar.com/compliance/.