Data protection

Data Privacy Policy for Website Visitors

Data Privacy Policy and Data Subject Information according to Art. 13, 14 EU-DSGVO

www.edle-tropfen.de

The protection of your personal data is an important concern for Ludwig Schokolade GmbH & Co KG. The collection and processing of your personal data is therefore carried out by our company exclusively within the framework of the data protection regulations. On this page we inform you in accordance with Art. 13, 14 EU Data Protection Regulation (EU-DSGVO) about the collection and processing of your personal data.

Responsible for data processing is

Ludwig Schokolade GmbH & Co. KG
Senefelderstraße 44
51469 Bergisch Gladbach, Germany
T +49 2202 105-500
F +49 2202 105-501
verwaltung@ludwig-schokolade.de

Our data protection officer is

Dr. Philipp Wehler
Hoffmann Liebs Partnerschaft von Rechtsanwälten mbB
Kaiserswerther Straße 119
40474 Düsseldorf
legal@krueger.de

While visiting this website and using its various offers, we process your personal data as described in detail below.

For the operation of the website, we are working together with an external service provider who we have carefully selected and obligated in accordance with data protection law.

Table of contents

  1. Cookies
  2. Server-Logfiles
  3. Google WebFonts
  4. Google Analytics
  5. Google Tag Manager
  6. Matomo (ehemals Piwik)
  7. Facebook Fanpage
  8. Kontaktaufnahme und Kundenreklamationen: Formular und E-Mail-Funktion
  9. Datensicherheit
  10. Betroffenenrechte

1. Cookies

2. Server log files

Each time you visit our website, your browser automatically transmits to us your IP address, identifier (manufacturer, version, operating system) and language settings of your web browser, the time of your visit and visited subpages of our website, your referrer URL (i.e. the URL of the page from which you visit us), as well as the data volume accrued during your visit to our website (hereinafter “Access Data“). We process your Access Data to ensure system security (e.g. to ward off hacker attacks) and to compile usage statistics. This processing is carried out on the basis of our legitimate overriding interest (Art. 6 para. 1 p. 1 lit. f) EU-DSGVO). You are under no legal or contractual obligation to provide us with your access data, nor is this necessary for the conclusion of a contract. However, you must provide us with your access data so that you can call up our website and use the offers and services provided on it.

3. Google WebFonts

This website uses Google WebFonts, a service of Google Inc. This service enables us to provide you with our website in a uniformly visually appealing manner with the help of the font library referred to above.

A uniform and visually attractive design of our website is in our overriding legitimate interest (Art. 6 (1) f EU-DSGVO). There is neither a user analysis, nor is a user profile created.

We have installed the Google Web Fonts locally on our website. Thus, there is no connection to Google servers.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

4. Google Analytics

a) Data categories concerned, recipients, processing purposes

This website uses Google Analytics, a web analytics service provided by Google, Inc (“Google”). As our processor, Google will process the data collected by means of Google Analytics in order to analyze your use of the websites, compile reports on corresponding activities and provide us with other services related to the use of our website. The statistics obtained in this way allow us to improve our offer and make it more interesting for you as a user. For this purpose, Google Analytics uses cookies, whereby the information generated by these cookies about your use of this website is generally transferred to a Google server in the USA and stored there.

When using Google Analytics, usually no personal data is processed. Your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured by means of suitable guarantees. For this purpose, EU standard contractual clauses have been concluded with the provider. Copies of these can be obtained from the person responsible or directly from the European Union at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

We would like to point out that on our websites Google Analytics has been extended by the plug-in “AnonymizeIP”; in order to ensure an anonymized collection of your IP address even in these exceptional cases, so that your data cannot be related to your person.

The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

b) Legal basis, storage period

The legal basis for the use of Google Analytics is Art. 6 para. 1 lit. [a) / f)] EU-DSGVO. Sessions are regularly terminated after 30 minutes without activity and campaigns after six months; data on campaigns can be stored for a maximum of two years.

c) Possibility of objection

Insofar as Google Analytics processes your data in personal form, you can object to this at any time – in this case, this processing will be stopped immediately.

You can send your informal objection in particular to our data protection officer: legal@krueger.de.

You can also exercise your right to object in particular by preventing the storage of cookies used by Google Analytics by setting your browser software accordingly (further information on this can be found here); however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Please note that by doing so you will leave our websites.

d) Information from Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001.

5. Google Tag Manager

a) This website uses the Google Tag Manager.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. The Google Tag Manager records your IP address. Insofar as personal data is transferred to the USA, an adequate level of data protection is ensured by means of suitable guarantees. For this purpose, EU standard contractual clauses have been concluded with the provider. Copies of these can be obtained from the responsible party or directly from the European Union at the following link: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de .

The use of Google Tag Manager is based on Art. 6 (1) lit. f DSGVO. Ludwig Schokolade has a legitimate interest in a quick and uncomplicated integration and management of various tools on its website. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

b) Information from Google

Google Dublin, Google Ireland Ltd.
Gordon House, Barrow Street, Dublin 4, Ireland
Fax: +353 (1) 436 1001

6. Matomo (formerly Piwik)

This website uses the open source web analytics service Matomo. Matomo uses technologies that enable cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before storage.

With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This allows us to find out, among other things, when a page has been viewed, which page has been viewed and from which region the page has been viewed. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the anonymized analysis of user behavior in order to optimize both its website and its advertising. If a corresponding consent was requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

IP anonymization

We use IP anonymization for the analysis with Matomo. In this case, your IP address is shortened before analysis so that it can no longer be clearly assigned to you.

Hosting

We host Matomo exclusively on our own servers, so all analytics data remains with us and is not shared.

7. Facebook Fanpage

You can find information about our products and services as well as news about our brand on our Facebook fan page (accessible at  www.facebook.com/Trumpf.Edle.Tropfen, hereinafter “fan page”) and you can create your own posts there (please note our terms of use for doing this).
We use the Page Insights function to analyze the use of our fan page. If you visit our fan page, we process your data collected using the Page Insights function together with Meta Platforms Ireland Ltd. as the jointly responsible party. These data include information about your visit and/or your interactions on our fan page which relate to you and which can therefore include personal data.
Meta Platforms Ireland Ltd. has made a commitment to fulfilling your rights as a data subject in accordance with Section 3 of the GDPR. Therefore we would like to refer you to the document created by Facebook called Information about Page Insights Data (accessible at www.facebook.com/legal/terms/information_about_page_insights_data)for further information about the processing of your personal data within the scope of Page Insights. You can find further information about how to exercise your rights in accordance with the GDPR in Facebook’s privacy policy (accessible at www.facebook.com/about/privacy). You can also contact us about exercising these rights. Please note that we do not have any insight into Facebook’s data processing. If you visit our fan page or share information on it, you must therefore expect that Facebook will save your actions on the fan page completely and/or in a personally identifiable form and process them for their own purposes.

8. Customer contact and customer complaints: contact form and e-mail function

You have the option of contacting us directly via a contact form stored on our website. If you do this, you must enter your name, e-mail address, title and address. We record this data, your message and your IP address as well as the time at which you send the form.

We also offer you the possibility to contact us directly via e-mail. If you click on the “E-mail” button on our website, your e-mail program will open and you can send us a message to our pre-entered e-mail address. We have no influence on the data processing by the e-mail program of your respective provider; we merely establish a link to the e-mail program.

We use the information you send us via the contact form or e-mail exclusively to process your request; we delete this information as soon as the communication has been completed, unless legal storage obligations require storage. We need your IP address and the time when you use the contact form for security reasons; this enables us to identify automated accesses and hacker attacks and to prevent them from happening again. This processing of the information you provide to us is in our legitimate interest (Art. 6 I 1 f EU-DSGVO).

9. Data Security

In order to protect your personal data in the best possible way, we use SSL encryption (https standard), technical and organizational security measures that are also adapted to the current state of the art in accordance with the risks involved.

10. Data Subject Rights

In the following, we would like to inform you about the further rights to which you are entitled in accordance with Articles 15-21 and Article 77 (1) EU GDPR. To assert these rights, you can contact our data protection officer in particular by e-mail legal@krueger.de.

a) Right to information:

In accordance with Art. 15 EU-DSGVO, you have the right to receive information about the data processing and a copy of the processed data. In this context, you also have the right to receive a copy of your personal data processed by us in accordance with Art. 15 (3-4) EU-DSGVO.

b) Right to rectification:

In accordance with Art. 16 EU-DSGVO, you have the right to request us to correct or complete your personal data.

c) Right to deletion:

In accordance with Art. 17 (1) EU-DSGVO, you have the right to demand that we delete your personal data. To the extent that we have published your personal data, you also have the right to request that we inform other data controllers of your request for the erasure of all links to and/or copies or replications of your personal data in accordance with Article 17(2) EU GDPR.

d) Right to restriction of processing:

In accordance with Art. 18 EU-DSGVO, you have the right to demand that we restrict the processing of your personal data.

e) Right to data portability:

Pursuant to Art. 20 EU GDPR, you have the right to receive the personal data about you that you have provided to us in a structured, commonly used and machine-readable format and to request that this data be transferred to another controller.

f) Revocation of your consent:

If you have given us consent to process your personal data, you may revoke this consent at any time, in whole or with respect to individual processing purposes, in each case without giving reasons.

Please note that any lawful processing of your personal data that has taken place up to the time of your revocation will not be rendered unlawful retroactively by such revocation.

You can revoke consents you have given us for the processing purposes listed above in particular by clicking on the hyperlinks provided there. You can also send your revocation by e-mail to legal@krueger.de.

In case of revocation of your consent given for a certain service, you can no longer use the corresponding service; beyond that, you will not suffer any disadvantages.

If you wish to revoke your consent only for certain processing and use purposes, we would like to ask you to make this clear in your revocation by naming the relevant purposes (e.g. as “Revocation of consent regarding the contact form” if you only wish to revoke your consent regarding the processing of your data for this purpose). If you do not specify your revocation in more detail or if you expressly declare it comprehensively, we will assume that you revoke your consent with regard to all collections, processing and uses explained in these data protection provisions.

g) Right of objection:

In accordance with Art. 21 EU-DSGVO, you have the right to object to the processing of your personal data by us, insofar as this is carried out for the purpose of direct advertising and/or on the basis of a “legitimate interest” within the meaning of Art. 6 para. 1 sentence 1 lit. f) EU-DSGVO.

h) Complaints to supervisory authorities:

In accordance with Art. 77 (1) EU-DSGVO, you have the right to lodge a complaint with a supervisory authority against the processing of your personal data by us, insofar as you are of the opinion that the processing of your personal data violates data protection provisions.

Responsible Contact for Data Protection and Freedom of Information in North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf

Tel.: 0211/38424-0
Fax: 0211/38424-10
E-mail: poststelle@ldi.nrw.de

In addition, you retain the right to pursue any other legal remedies to which you are entitled (e.g., in court or before the authorities).

© 2023 Ludwig Schokolade GmbH & Co. KG