Data privacy

Privacy policy

In accordance with the requirements of the General Data Protection Regulation (GDPR), we would like to use this privacy statement to inform you about the nature, scope and purpose of the personal data we process and about your associated rights.

Name and address of the controller

Person responsible within the meaning of the GDPR:

Koßler GmbH

Kottwitzstraße 11

20253 Hamburg

Deutschland

Tel: +49 (0) 176 87 28 35 66

E-Mail: nico@kossler.gmbh

Represented by CEO: Nico Koßler

Data processing during the use of our website

2a. Server log files

Data collected:

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

• Your IP address
• The website you came from
• Web pages that you access through our site
• The pages you click on, and
• The time of the page call
• The name of your Internet service provider
• Your browser type and its version
• The operating system of your terminal device
• The date and duration of your visit
•  

Data processing purposes:

The temporary storage of this data is necessary to enable delivery of the website to your computer and to ensure the functionality of the website. With the help of this data, we also gain statistical insights into how our web pages are used. In addition, we collect the data in order to be able to trace and prevent unauthorized access to the web server and misuse of the web pages and to secure our information technology systems.

Legal basis:

We temporarily store this data on the basis of legitimate interests (Art. 6, 1 f GDPR). Our legitimate interest is to achieve the purposes described above.

Storage period and control options: Data is deleted when it is no longer necessary to achieve the purposes. Log files are deleted after 90 days at the latest.

2b. General information about cookies and targeting technologies

Data collected:

When visiting our websites, so-called cookies are set. These are small text files that are stored on your terminal device. Cookies usually contain a characteristic string of characters, the so-called cookie ID, with which your browser can be identified when you visit our websites again. In addition, we use so-called tags, which are small code elements that help us measure the behavior of our users and the success of advertising activities. Depending on the type of cookies or tags, different data is collected and processed pseudonymously. We use both our own cookies and cookies from other providers (third-party cookies). The third-party cookies are described in detail below in section II. C in detail.

Purposes of data processing:

Technically necessary cookies enable the technical functioning of the website. Some functions of our websites cannot be offered without the use of the cookies. Functionality cookies are used to make our websites more user-friendly and to ensure certain functionalities, e.g. the cross-page shopping cart display, in which you can see how many items are currently in your shopping cart, and the storage of your login data so that you can access the data and settings you have already entered when you return to the site.

Analytics cookies and tags allow us to generate aggregate statistics, for example, about the number of views, which areas of the websites are viewed most frequently, and information about locations and about the duration of the average stay on the websites. This allows us to improve the quality of our websites and content. Advertising cookies and retargeting technologies enable us to provide you with offers and information tailored to you. This allows us to make our websites more interesting for you and to address you on other websites with personalized, interest-based advertising.

Legal basis:

We use technically necessary cookies and functionality cookies on the basis of legitimate interests (Art. 6, 1 f GDPR. Our legitimate interest is to ensure the functioning of our websites and their optimal usability. We use analysis cookies and advertising cookies as well as tags and retargeting technologies on the basis of legitimate interests (Art. 6, 1 f GDPR, recital 47). Our legitimate interest is to tailor our websites optimally to the interests of our customers.

Storage duration and control options:

Some of the cookies we use are automatically deleted after you close your browser (so-called session cookies), others remain permanently on your terminal device and allow us to recognize your browser (so-called persistent cookies). You have full control over the use of cookies and can delete cookies in your browser, disable the storage of cookies altogether or selectively accept certain cookies. Please use the help functions of your browser to learn how to change these settings. This may limit the functionality of our websites.

2c. Integration of videos on the website

To integrate videos on our websites and in our newsletter, we use external video providers, primarily Vimeo and Youtube, because independent, local hosting of videos is not efficient for us. Videos offer us a great way to explain content to you even better and make it more understandable. In addition, it may happen that we also embed other videos from external sites with us. Third-party providers are used here as well. When you watch videos on our websites, there are – for technical reasons – calls to the servers of providers such as Vimeo and YouTube. For the associated use of data from your browser or terminal device, we refer to the respective privacy notices of these providers.

The privacy policy of YouTube can be found here: https://www.google.com/policies/privacy/.

The privacy policy of Vimeo can be found here: https://vimeo.com/privacy.

2d Links to other websites

Our website may contain links to the websites and online offers of other providers not affiliated with us. When you click on these links, we naturally no longer have any influence on what data is collected by the respective providers and what data is collected by them. Detailed information on data collection and use can be found in the privacy policy of the respective provider. Since the collection and processing of data by third parties is beyond our control, we cannot accept any responsibility for this.

E-mail contact

Data collected:

We collect and process the data you provide, such as your contact information, name and request, when you contact us via email. All data that you transmit to us is encrypted and transferred between your browser and our server.

Purposes of data processing:

Data processing is carried out by us exclusively on the basis of and for the purpose of processing your request.

Legal basis:

We process your data in order to carry out pre-contractual and contractual measures in response to your request (Art. 6, 1 b GDPR).

Storage period:

We store your data for as long as we need it for the specific processing purpose, for warranty purposes or to comply with statutory retention periods.

3. Ihre Rechte

Revocation of consent:

You may revoke any consent you may have given for the processing of your personal data at any time with effect for the future. Please note that the revocation has no effect on the lawfulness of the previous data processing and that it does not extend to such data processing for which there is a legal reason for permission and which may therefore also be processed without your consent.

Other data subject rights:

In addition, you are entitled to the following data subject rights in accordance with Articles 15 to 21 and 77 of the EU General Data Protection Regulation (GDPR) if the legal requirements are met:

Information:

You may at any time request that we provide you with information about which of your personal data we process and how, and a copy of the personal data we hold about you, Art. 15 GDPR.

Correction:

You may request that we correct inaccurate personal data and complete incomplete personal data, Art. 16 GDPR.

Erasure:

To delete your personal data: Please note, excluded from deletion is data that we need for the execution and performance of contracts and for the assertion, exercise and defense of legal claims, as well as data for which there are legal, regulatory or contractual obligations to retain, Art. 17 GDPR.

Restriction of processing:

You may request the restriction of processing under certain circumstances, e.g. if you believe that your data is inaccurate, if the processing is unlawful or if you have objected to the data processing. This means that your data may only be processed in a very restricted manner without your consent, e.g. for the assertion, exercise and defense of legal claims or for the protection of the rights of other natural and legal persons, Art. 18 GDPR.

Data portability:

You have the right to receive the data that you have provided to us and that we process on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format and, to the extent technically feasible, to request direct transfer of this data to third parties, Art. 20 GDPR.

Right to complain to a supervisory authority.

If you believe, for example, that our data processing is unlawful or that we have not granted the rights described above to the extent necessary, you have the right to lodge a complaint with the competent data protection supervisory authority.

Status: August 2023