PRIVACY POLICY We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website and for what purposes it is used. This data protection declaration applies to the Internet offer of Spitzdruck GmbH, which can be reached under the domain https://www.spitzdruck.de/. Who is responsible and how do I contact you? Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) Spitzdruck GmbH Steinkirchring 34 78056 VS-Schwenningen Telephone 07720/99 583-0 Fax 07720/99 583-29 info@spitzdruck.de www.spitzdruck.de Contact person for data protection is: Mr. Joachim Spitz. Can be reached at: info@spitzdruck.de What is it about? This data protection declaration fulfills the legal requirements for transparency in the processing of personal data. This is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or user behavior when visiting a website. Information in which we cannot (or only with a disproportionate effort) relate to you personally, e.g. through anonymization, is not personal data. The processing of personal data (e.g. the collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose. Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods and criteria for storage in the individual processing operations. Regardless of this, we save your personal data in individual cases to assert, exercise or defend legal claims and if there are statutory retention requirements. Who will get my data? We only pass on your personal data, which we process on our website, to third parties if this is necessary for the fulfillment of the purposes and in individual cases is covered by the legal basis (e.g. consent or protection of legitimate interests). In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement authorities, lawyers, auditors, courts, etc. Insofar as we use service providers for the operation of our website who process personal data on our behalf in the context of order processing in accordance with Art. 28 GDPR, these can be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations. Do you use cookies? We only pass on your personal data, which we process on our website, to third parties if this is necessary for the fulfillment of the purposes and in individual cases is covered by the legal basis (e.g. consent or protection of legitimate interests). In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients can then be, for example, law enforcement authorities, lawyers, auditors, courts, etc. Insofar as we use service providers for the operation of our website who process personal data on our behalf in the context of order processing in accordance with Art. 28 GDPR, these can be recipients of your personal data. You can find more information on the use of processors and web services in the overview of the individual processing operations. Domain Name Description .google.com 1P_JAR This cookie contains information about how the end user uses the website and any advertisements that the end user may have seen before visiting the website. .google.com NID This cookie is set by DoubleClick (owned by Google) to create a profile of your interests and to show you relevant advertisements on other websites. www.spitzdruck.de dm_timezone_offset www.spitzdruck.de dm_last_page_view www.spitzdruck.de dm_this_page_view www.spitzdruck.de dm_last_visit www.spitzdruck.de dm_total_visits www.spitzdruck.de _sp_id.5e6e simplybusiness.co.uk www.spitzdruck.de _sp_ses. 5e6e simplybusiness.co.uk What rights do I have? Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), you as the person concerned have the following rights: Information in accordance with Art. 15 GDPR, Section 34 BDSG about the data stored about you in the form of meaningful information to the details of the processing and a copy of your data; Correction in accordance with Article 16 GDPR of incorrect or incomplete data that we have stored; Deletion of the data stored by us in accordance with Art. 17 GDPR, insofar as the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; Restriction of processing in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to delete it because you need it to assert, exercise or defend legal claims or you have objected against the processing according to Art. 21 GDPR. Data portability in accordance with Art. 20 GDPR, insofar as you have provided us with personal data within the framework of a consent in accordance with Art. 6 Paragraph 1 lit. a GDPR or on the basis of a contract in accordance with Art. 6 Paragraph 1 lit. b GDPR and this have been processed by us using automated procedures. You will receive your data in a structured, common and machine-readable format or we will transmit the data directly to another person responsible, as far as this is technically feasible. Objection according to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 Para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation or there is an objection to direct mail directs. The right to object does not exist if overriding, compelling reasons worthy of protection are proven for the processing or the processing is carried out to assert, exercise or defend legal claims. If the right to object to individual processing operations does not exist, this is indicated there. Revocation of your given consent in accordance with Art. 7 Paragraph 3 GDPR with effect for the future. Complaint in accordance with Art. 77 GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters. How will my data be processed in detail? In the following, we will inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place. Provision of the website Type and scope of processing When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file: IP address of the requesting computer Date and time of access Name and URL of the file accessed Website from which access was made (referrer URL) Browser used and, if applicable, your operating system Computer, as well as the name of your access provider [Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of providing the website.] Purpose and Legal basis The processing is carried out to safeguard our predominantly legitimate interest in displaying our website and guaranteeing security and stability on the basis of Art. 6 Paragraph lit. f GDPR. The collection of the data and the storage in log files is absolutely necessary for the operation of the website. There is no right of objection to the processing due to the exception according to Art. 21 Para. 1 GDPR. Insofar as the further storage of the log files is required by law, the processing takes place on the basis of Art. 6 Para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data, but it is technically not possible to call up our website without providing the data. Storage period The aforementioned data is stored for the duration of the website display and, for technical reasons, for a maximum of 7 days. Contact form Type and scope of processing On our website, we offer you the option of contacting us using a form provided. The information that is collected via mandatory fields is required to process the request. In addition, you can voluntarily provide additional information that you believe is necessary for processing the contact request. When using the contact form, your personal data will not be passed on to third parties. Purpose and legal basis Your data is processed using our contact form for the purpose of communicating and processing your request on the basis of your consent in accordance with Article 6 (1) (a) GDPR. Insofar as your request relates to an existing contractual relationship with us, processing for the purpose of fulfilling the contract takes place on the basis of Art. 6 Paragraph 1 lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your request without providing the information in the mandatory fields. If you do not want to provide this data, please contact us by other means. Storage period If you use the contact form on the basis of your consent, we will store the data collected for each request for a period of three years, starting with the processing of your request or until you withdraw your consent. If you use the contact form as part of a contractual relationship, we will save the data collected for each request for a period of three years from the end of the contractual relationship. AWS CloudFront Type and scope of processing We use AWS CloudFront to properly provide the content of our website. AWS CloudFront is a service provided by Amazon Web Services, Inc., which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Amazon Web Services, Inc., whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of AWS CloudFront. Purpose and legal basis The content delivery network is used on the basis of our legitimate interests, ie interest in a secure and efficient provision and the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by Amazon Web Services, Inc. Further information can be found in the data protection declaration for AWS CloudFront: https://aws.amazon.com/de/privacy/. Duda CDN Type and scope of processing We use Duda CDN to properly provide the content of our website. Duda CDN is a service provided by Duda, Inc., which acts as a content delivery network (CDN) on our website. A CDN helps to provide the content of our online offer, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to the servers of Duda, Inc., 577 College Avenue, Palo Alto, CA 94306, United States, whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Duda CDN. Purpose and legal basis The content delivery network is used on the basis of our legitimate interests, ie interest in a secure and efficient provision and the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit. Storage period The specific storage period of the processed data cannot be influenced by us, but is determined by Duda, Inc. Further information can be found in the data protection declaration for Duda CDN: https://www.duda.co/legal/privacy. Facebook Pixel Type and scope of processing We use Facebook Pixel from Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, to create so-called custom audiences, i.e. to segment visitor groups of our online offer, to determine conversion rates and these then optimize. This happens in particular when you interact with advertisements that we have placed with Facebook, Inc. Purpose and legal basis We process your data with the help of Facebook Pixel for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Article 6 Paragraph 1 lit. GDPR. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by Facebook, Inc. Further information can be found in the data protection declaration for Facebook Pixel: https://www.facebook.com/privacy/explanation. Google APIs Type and scope of processing We use Google APIs from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland to access other services and data from Google LLC. Your IP address will be transmitted to Google LLC. Please note that there is a single section in this data protection declaration for each additional service that we use from Google LLC. Purpose and legal basis The use of Google APIs is based on our legitimate interests, ie interest in optimizing our online offer in accordance with Art. 6 Paragraph 1 lit. f. GDPR. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google APIs: https://policies.google.com/privacy. Google Custom Search Type and scope of processing We have integrated components from Google Custom Search on our website. Google Custom Search is a service of Google LLC and offers search solutions for websites and web applications. If you use the search function on our website, you establish a connection to the servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google Custom Search. Purpose and legal basis The use of the service is based on our legitimate interests, ie interest in providing the full functionality of the website, as well as the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google Custom Search: https://policies.google.com/privacy. Google Fonts Type and scope of processing We use Google Fonts from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, connect to the servers of Google LLC and your IP address will be transmitted. Purpose and legal basis The use of Google Fonts takes place on the basis of our legitimate interests, ie interest in a uniform provision as well as the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google Fonts: https://policies.google.com/privacy. Google reCAPTCHA Type and scope of processing We have integrated components from Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google LLC and enables us to distinguish whether a contact request comes from a natural person or whether it is automated using a program. When you access this content, you establish a connection to the servers of Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the length of stay and mouse movements of the user in order to distinguish automated queries from human queries. These data are processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA. Purpose and legal basis The service is used on the basis of our legitimate interests, ie to protect the transmission of forms in accordance with Article 6 (1) (f) GDPR. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the data protection declaration for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US. IONOS MyWebsite Type and scope of processing Our website was created using the IONOS MyWebsite modular website system. IONOS MyWebsite is a service of 1 & 1 IONOS SE and offers web development technology, web design and layout tools, domain hosting and other applications for marketing and workflow management. We use IONOS MyWebsite for web hosting and the presentation of our website, among other things. IONOS MyWebsite also collects statistical data about visits to our website. The following data is usually transmitted: the website accessed, the date and time of access, the amount of data transferred, the notification of whether the access was successful, the browser type and version, the user's operating system, the previously visited website (referrer) and the IP address. These log data are processed exclusively for the purposes mentioned above, as well as to maintain security, functionality and the optimization of the IONOS MyWebsite offer. Purpose and legal basis The use of the service is based on our legitimate interests, ie interest in a secure and efficient provision, as well as the optimization of our online offer in accordance with Art. 6 Paragraph 1 lit. Storage duration The specific storage duration of the processed data cannot be influenced by us, but is determined by 1 & 1 IONOS SE. Further information can be found in the data protection declaration for IONOS MyWebsite: https://www.ionos.de/terms-gtc/terms-privacy.