Data Privacy
Privacy Notice under the General Data Protection Regulation
1) Information about the collection of personal data and contact details of the data controller
1.1 We thank you for visiting our site and for your interest. Below we would like to inform you about how your personal data is handled in the context of using our website. Personal data is defined as any data that personally identifies you.
1.2 The data controller of the data provided within our website pursuant to the General Data Protection Regulation (RGPD) è BONAVENTURA S.r.l., Corso Giacomo Matteotti 3, 20121 Milan, Italy, Telephone: +39 02 9713 3150, e-mail: service@bonaventura.com. The person responsible for the processing of personal data è the natural or legal person who, alone or together with others, determines the purposes and means of the processing of personal data.
2) Collection of data when visiting our website
2.1 With the purely informational use of our website, i.e. without making any registration or otherwise transmitting information, only the data transmitted by the user's browser to our server (so-called "server log files") are tracked. When the user accesses our website, we detect data that is technically necessary for viewing our website, namely:
- which page è was visited
- date and time at the time of access
- size of data sent in Bytes
- source/reference from which the user è arrived at the site
- browser used
- operating system used
- IP address used (possibly in anonymized form
The processing is carried out in accordance with Art. 6 c. 1 let. f of the RGPD on the basis of our legitimate interest in improving the stability and functionality of our website. È transfer or any other use of the data is to be excluded. Should concrete indications of unlawful use emerge, we nevertheless reserve the right to verify the server log files at a later date.
2.2 For security reasons and for the purpose of transmission of personal data and other confidential content (e.g., orders or requests to the responsible party), this website employs SSL or TLS encryption. Encrypted transmission can be recognized by the browser bar, where the site address è preceded by "https://" and the padlock icon.
3) Hosting and Content-Delivery-Network
3.1 GoDaddy
For hosting our website and displaying page content we use the system of the following provider: Go Daddy Operating Co LLC, 14455 North Hayden Road, Suite 226, Scottsdale, AZ 85260, USA
All data collected through our website is processed on the provider's servers.
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits its unauthorized disclosure to third parties.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
3.2 Shopify
For hosting our website and displaying page content we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irelan.
Data is also transferred to: Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected through our website is processed in the provider's servers.
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits its unauthorized disclosure to third parties.
In the case of data transfer to Canada, an adequate level of data protection è guaranteed by an adequacy decision of the European Commission.
3.3 SiteGround
For hosting our website and displaying page content we use the system of the following provider: SiteGround Hosting Ltd., 3rd Floor, 11-12 St James's Square, St. James's, London SW1Y 4LB, United Kingdom
All data collected through our website are processed in the provider's servers.
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits its unauthorized disclosure to third parties.
In case of data transfer to the provider's premises, an adequate level of protection è guaranteed by an adequacy decision of the European Commission.
4) Cookies
To make your visit to our site interesting and enable the use of certain functions, we make use of cookies, which are small text files that are saved on the user’s device. In some cases, these cookies are deleted automatically after closing your browser (so-called “session” cookies), while other cookies remain on your device for a longer period and allow you to save page settings (so-called “permanent” cookies). In the latter case, the storage period can be found in the browser's cookie settings overview.
Where through individual cookies implemented by us personal data are also processed, the processing is carried out in accordance with’Art. 6, c. 1, lett. b) of the RGPD for the purpose of contract performance, in accordance with’Art. 6, c. 1, lett. a) of the RGPD in case of consent given or in accordance with’Art. 6, c. 1, lett. f) of the RGPD with the purpose of ensuring our legitimate interest in the improvement of the functionality of the website and a’more efficient and pleasant visiting experience for the customer.
È you can set your browser to be informed about the saving of cookies by choosing from time to time whether to accept them, exclude them in certain cases or disable them altogether.
We would like to inform you that not accepting cookies may limit the functionality of our website.
5) Contact Us
5.1 Shopify Inbox
This website uses a live chat system from the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Processing of personal data transmitted via chat takes place pursuant to Art. 6 para. 1 lit. b RGPD as it is necessary for the’initiation or performance of the contract, or pursuant to Art. 6 para. 1 lit. f RGPD on the basis of our legitimate interest in ensuring adequate assistance to the users of our site. Subject to any statutory retention periods, your data so transmitted will be deleted once the case in question has been finally clarified. For the purpose of creating pseudonymized user profiles, additional information may also be collected and analyzed with the use of cookies, which, however, do not allow personal identification of the user and are not integrated with other data. If this information presents direct references to a person, the processing è governed by Article 6 paragraph 1 letter f RGPD, based on our legitimate interest in statistical analysis of user behavior for a’service optimization.
È it is possible to prevent the use of cookies by adopting the appropriate browser settings. In this case, however, the functionality of our website may be limited. The user has the option at any time to object to the collection and storage of data aimed at creating a pseudonymized user profile with effect for the future.
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits its unauthorized disclosure to third parties.
In the case of data transfer to Canada, an adequate level of data protection è ensured by an adequacy decision of the European Commission.
5.2 Stamped
To send review reminders we use the services of the following provider: Stamped.io PTE. LTD., 68 Circular Road, #02-01, Singapore 049422
We transmit to the provider, solely on the basis of your explicit consent under Article 6 paragraph 1 letter a RGPD, your e-mail address and possibly other customer-related data so that the provider can send you a review reminder by e-mail.
You can revoke your consent at any time with effect for the future with respect to both us and the provider.
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits its unauthorized disclosure to third parties.
5.3 WhatsApp Business
We offer users who visit our site the opportunity to get in touch with us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The so-called “Business Version” of WhatsApp is used for this purpose.
Whenever you contact us via WhatsApp as part of a transaction (e.g., an order placed), we will store and use the cell phone number used by you on WhatsApp and, if available, your first and last name within the meaning of Article 6 paragraph 1 lit. b of the RGPD to process and respond to your request. Based on the same legal basis we will eventually ask the user on WhatsApp to provide other data (order number, customer number, address or e-mail address) in order to associate his request with a specific procedure.
Whenever the user uses our WhatsApp contact for general inquiries (e.g. about the range of services, availability, or our website), we will store and use the cell phone number used by the user on WhatsApp and, if available, his/her first and last name in accordance with Article 6 paragraph 1 letter f of the RGPD on the basis of our legitimate interest in providing the requested information in an efficient and timely manner.
The user’s data will always be used exclusively to respond to your requests via WhatsApp. The data will not be passed on to third parties.
We would like to point out that WhatsApp Business has access to the address book of the mobile device we use and automatically transfers the phone numbers saved in the address book to a server of the parent company Meta Platforms Inc. in the United States. To manage our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact information of users who, in turn, contact us via WhatsApp is saved.
In this way, it is ensured that any person whose WhatsApp contact data is saved in our address book, upon first use of the app on their device, has already given consent to the transmission of their WhatsApp phone number from the address books of their chat contacts through acceptance of WhatsApp's terms of use in accordance with Art. 6 paragraph 1 letter a of the RGPD. Therefore, è the transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded.
With regard to the purpose and volume of data collected, the subsequent processing and use by WhatsApp, as well as the related rights of the user and setting options for the protection of his or her privacy, please refer to WhatsApp's data protection policy: https://www.whatsapp.com
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
5.4 Should you contact us (e.g., via contact form or email), the collection of your personal data will take place. The personal data collected when filling out the contact form are indicated on the contact form. This data is stored and used exclusively for responding to your requests, contacting you, and related technical operations.
Legal basis for data processing è our legitimate interest in responding to user requests in accordance with Art. 6 c. 1 let. f of the RGPD. If the purpose of contacting the user is to conclude a contract, an additional legal basis for data processing è provided by Art. 6 c. 1 let. b of the RGPD. Once the request has been processed, the user's data will be deleted. This will only occur once the content of the request has been finally clarified, and provided that there are no legal obligations regarding data retention.
6) Comments function
With regard to the use of the comment function on this website, in addition to the user's comment, information about the time the comment was created and the nickname chosen by the commenter is also stored and posted on the site. The IP address is also protocolled and stored. The storage of the IP address is done for security reasons and in order to trace the possible author of comments with offensive or illegal content to the detriment of third parties. The user's e-mail address è necessary to be able to contact him if third parties challenge the legitimacy of content posted by him. Legal basis for the storage of user data è art. 6 c. 1 let. b and f of the RGPD. We reserve the option to delete comments if third parties contest their legitimacy.
7) Data processing in case of opening a customer account and for the purpose of executing a contract
According to Art. 6 c. 1 let. b of the RGPD, personal data may also be collected and processed if the user provides it for the purpose of executing a contract or opening a customer account. The user's personal data collected are indicated in the respective data entry forms. È you can cancel your customer account at any time by sending a message to the manager's address above. The data provided by the user are stored and used for the purpose of contract execution. Upon successful execution of the contract or upon deletion of your customer account, your data will be blocked due to the retention periods stipulated by tax and commercial law provisions and, after these periods have expired, deleted, except in cases where you have not given express consent to their further use or our company expressly reserves the’ further use of the data permitted by law, which we will inform you of in full below.
8) Use of user data for direct advertising
8.1 Subscribe to our electronic email newsletter
If the user decides to subscribe to our electronic newsletter, he/she will receive regular information about our offers. The only mandatory data for the purposes related to sending the newsletter è the user's e-mail address. The’inclusion of other data è optional and serves only to personalize the communication. For sending the newsletter we use the so-called Double Opt-in procedure. This means that the user will receive the electronic newsletter only after he has expressly confirmed his consent to its sending. He/she will therefore receive a counter-verification e-mail in which he/she will be asked to confirm that he/she wishes to receive the newsletter in the future by validating his/her subscription by clicking on a special link.
By clicking on the confirmation link, the user gives consent to the use of his personal data in accordance with Article 6 c. 1 let. a of the RGPD. By subscribing to the newsletter our companyà stores the IP address of the user registered by the Internet Service Provider (ISP), as well as the date and time of registration; all this for the purpose of future traceability in case of misuse of the user's e-mail address. The data collected at the time of subscribing to the newsletter are used exclusively for advertising messages within the newsletter. The user will be able to unsubscribe from the newsletter at any time by clicking on the appropriate link in the newsletter itself or by sending a request to the person responsible above. Termination of the newsletter service also implies the immediate deletion of the user's e-mail address from our newsletter manager's system, unless the user has expressly consented to further use of his or her data or our company has reserved further use of the data permitted by law, about which we hereby inform.
8.2 Klaviyo
We send our e-mail newsletter through the following provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA
Based on our legitimate interest in effective and user-friendly marketing via newsletters, in accordance with Art. 6, c. 1 (f) of the RGPD we transmit the data provided to us when subscribing to the newsletter to the contracted provider so that it can proceed to send the newsletter on our behalf.
With the explicit consent of the user in accordance with Art. 6, c. 1, lett. a) of the RGPD, the provider also performs a statistical evaluation of the success of the newsletter campaigns by means of web beacons or tracking pixels in the sent e-mails, which allow measuring open rates and specific interactions with the newsletter content. Information about the user’s device (e.g., access time, IP address, browser type, and operating system) is also collected and evaluated, but not associated with any other data.
È you can revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the provider that protects the data of visitors to our site and prohibits disclosure to third parties.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
8.3 Shopify Email
The sending of our email newsletter is done through the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Based on our legitimate interest in effective and user-friendly marketing via newsletters, in accordance with Art. 6, c. 1 (f) of the RGPD we transmit the data provided to us when subscribing to the newsletter to the contracted provider so that it can proceed to send the newsletter on our behalf.
With the explicit consent of the user in accordance with Art. 6, c. 1, lett. a) of the RGPD, the provider also performs a statistical evaluation of the success of the newsletter campaigns by means of web beacons or tracking pixels in the sent e-mails, which allow measuring open rates and specific interactions with the newsletter content. Information about the user’s device (e.g., access time, IP address, browser type, and operating system) is also collected and evaluated, but not associated with any other data.
È you can revoke your consent to newsletter tracking at any time with effect for the future.
We have entered into a data processing agreement with the vendor that protects the data of visitors to our site and prohibits its disclosure to third parties.
In the case of data transfer to Canada, an adequate level of data protection è guaranteed by an adequacy decision of the European Commission.
8.4 Notice of goods available by e-mail
Whenever our online shop offers the option of receiving an e-mail alert as soon as certain temporarily unavailable items are available for purchase again, you may sign up for such an alert service. Should you register for the merchandise availability alert service, you will receive a one-time e-mail message regarding the availability of the selected item. The only data required for the purpose of such notification è the’user’s e-mail address. Any other data provided on a voluntary basis will be used only for the purpose of addressing the’user by the respective name. For the purpose of sending said communication, we make use of the procedure known as double opt-in, i.e., the message will be sent to the user only once the latter has expressly confirmed that he/she gives his/her consent to receive the message. In this case, the’user will be sent an e-mail message with a request to click on the respective link confirming that they wish to receive said communication.
By activating the confirmation link, the user gives consent to the’use of personal data in accordance with Art. 6 c. 1 lett. a of the RGPD. When registering for our e-mail reporting service, we save the IP address recorded by the Internet provider (ISP) as well as the date and time of registration in order to be able to detect any abuse of the e-mail address at a later time. We use the data collected during registration for the e-mail merchandise availability alert service solely for the purpose of informing the user about the availability of a particular item in our online shop. You have the option to opt out of the merchandise availability e-mail alert service by sending notice to the Manager listed at the top of this policy. Upon receipt of such a request from the user, the e-mail address will be immediately removed from the respective mailing list, unless the user has given express consent to the further use of his/her data or our company has reserved further use of the data provided for by law, which this notice deals with.
8.5 Advertisingà by mail
. By virtue of our legitimate interest in personalized direct advertising, we reserve the right to save in our database first name, last name, shipping address and in addition, having received such additional information within the scope of the contractual relationship, title, academic degree, year of birth, professional title, business sector name within the meaning of Art. 6 c 1, let. f of the RGPD. We also reserve the right to use such data to send you by mail interesting offers and information about our products. you can object to the storage and use of data for this purpose at any time by sending a message to the data controller.
8.6 Advertisingà by mail
By virtue of our legitimate interest in personalized direct advertising, we reserve the right to save in our database your first name, last name, shipping address and in addition, having received such additional information in the framework of the contractual relationship, title, academic degree, year of birth, professional title, business sector name within the meaning of Art. 6 c 1, let. f of the RGPD. We also reserve the right to use this data to send you by mail interesting offers and information about our products. you can object to the storage and use of your data for this purpose at any time by sending a message to the data controller.
9) Data processing for the purpose of order processing
9.1 To the extent that this is necessary for the processing of the contract for the purpose of delivery and payment, the personal data collected by us will be transmitted to the contracted transport company and the contracted credit institution in accordance with Art. 6 c. 1 let. b RGPD.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you at the time of your order in order to inform you personally by appropriate means of communication (e.g., by mail or e-mail) about upcoming updates within the legally stipulated time period as part of our duty to inform pursuant to Art. 6 c. 1 let. c RGPD. Your contact information will be used exclusively to inform you about updates due from us and will be processed by us for this purpose only to the extent that this is necessary for the respective information.
For the processing of your order, we also cooperate with the following service providers, who support us in whole or in part in the execution of the concluded contracts. Some personal data is transmitted to these service providers on the basis of the following information.
9.2 Xentral
For order processing we use the following provider: Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg, Germany
Your name, address and any other personal data will be transmitted to this provider in accordance with Art. 6, c. 1, letter b) of the RGPD for the purpose of processing your online order. The transmission of user data takes place only if this is actually necessary for the processing of the order. We also use the supplier for accounting purposes. The supplier processes incoming and outgoing invoices as well as our company's bank movements to automatically detect invoices, associate them with the relevant transactions and thus manage accounting through a semi-automatic process.
In the event that personal data is also processed, this is done in accordance with Article 6, c.1(f) of the RGPD, based on our legitimate interest in the efficient organization and documentation of our business processes.
9.3 Use of payment service providers
- Amazon Pay
On this site, one or more online payment methods are available from the following provider: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg
By choosing one of the supplier's payment methods that requires upfront performance (e.g., payment by credit card), payment data (including name, address, bank and payment card details, currency, and transaction number) provided during the ordering process, as well as information about the content of the order will be transmitted to the supplier in accordance with Art. 6, c. 1, lett. b) of the RGPD. The transmission of the user’s data takes place in this case exclusively for the purpose of payment processing by the supplier and only if this’s actually necessary for this purpose.
- Klarna
On this site, one or more online payment methods are available from the following provider: Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
By choosing a payment method from the provider that requires an upfront performance (e.g., payment by credit card), payment data (including name, address, bank and payment card details, currency and transaction number) provided during the order process, as well as information about the content of the order will be transmitted to the provider in accordance with Art. 6, c. 1, letter b) of the RGPD. The transmission of the user's data takes place in this case exclusively for the purpose of payment processing by the supplier and only if this is actually necessary for this purpose.
When you choose a payment method for which the supplier performs an advance service (e.g. purchase against invoice, installment payment, or direct debit), you will be asked to provide certain personal data (first and last name, street, house number, zip code, locality, date of birth, e-mail address, telephone number, and, in some cases, data relating to an alternative payment method) during the ordering process.
In order to safeguard our legitimate interest in ascertaining the solvency of our customers, we transmit this data to the supplier in accordance with Art. 6, c. 1 (f) of the RGPD for the purpose of solvency verification. Based on the personal data provided by the’user and other data (such as shopping cart, invoiced amount, order history, previous payment information), the supplier verifies whether the’payment option selected by the’user can’be granted in relation to payment and/or default risks.
As part of the request review, pursuant to Art. 6, c. 1(f) of the RGPD, information on identity and creditworthiness from the following credit agencies may be included in the decision-making process in addition to the supplier's internal criteria:
https://cdn.klarna.com
The creditworthiness check may contain probabilistic values (so-called score values). To the extent that they affect the outcome of the creditworthiness check, score values find their basis in a scientifically recognized mathematical-statistical procedure. The calculation of score values is also influenced, among other things, but not exclusively, by address data.
The
user
may at any time revoke consent to the processing of his or her data by sending notice thereof to us or the provider. However, this may be without prejudice to the supplier's right to process the user's personal data to the extent necessary for the purpose of processing the payment as stipulated in the contract.
- Paypal
On this site one or more of the following provider's online payment methods are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
By choosing a payment method of the provider that requires upfront performance, payment data (including name, address, bank and payment card details, currency and transaction number) provided during the ordering process, as well as information about the content of the order will be transmitted to the provider in accordance with Art. 6, c. 1, letter b) of the RGPD. The transmission of the user's data takes place in this case exclusively for the purpose of payment processing by the supplier and only if this is actually necessary for this purpose.
By choosing a payment method for which the supplier performs an advance service, during the ordering process you will be asked to provide certain personal data (first and last name, street name, house number, zip code, locality, date of birth, e-mail address, telephone number and, in some cases, data related to an alternative payment method).
In order to safeguard our legitimate interest in ascertaining the solvency of our customers, we transmit this data to the supplier in accordance with Art. 6, c. 1 (f) of the RGPD for the purpose of solvency verification. On the basis of the personal data provided by the user and other data (such as shopping cart, invoiced amount, order history, previous payment information), the provider verifies whether the payment option selected by the user can be granted in relation to payment and/or insolvency risks.
- Shopify Payments
On this site, one or more of the following provider's online payment modes are available: Shopify Payments”, 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. Where, Ireland
You choose a payment method from the provider that requires an upfront performance (e.g., payment by credit card), payment data (including name, address, bank and payment card details, currency and transaction number) provided during the ordering process, as well as information about the content of the order will be transmitted to the provider in accordance with Art. 6, c. 1, lett. b) of the RGPD. The transmission of the user’s data takes place in this case exclusively for the purpose of payment processing by the supplier and only if this’s actually necessary for this purpose.
10) Online Marketing
10.1 Data Feed Watch
For the purpose of providing and synchronizing various services related to customer management, this site uses the software-based marketing service of the following provider: WordWatch, Inc.,1195 Chess Drive Suite 201 Foster City, CA 94404, USA
This service allows to automatically manage feed activities, to drive advertising through the marketing channels used, to perform an’analysis of the’effectiveness of marketing actions as well as to centrally manage mail marketing activities and contacts.
In order to provide the various functions, the service uses cookies, i.e. small text files stored locally in the cache of the browser used on the user’s device, which allow us to analyze the use of the site. The cookies detect certain data, including IP address, location, time and date of page view.
The treatments described above, and in particular the’setting of cookies aimed at detecting information present on the mobile device used, take place, according to’art. 6 c. 1 lett. a) of the RGPD, only against the’express consent of the’user. The’user has the option to revoke his/her consent at any time, with future effect, by deactivating this service with the’appropriate cookie consent tool on the site.
Other legal bases for data processing carried out in the context of specific services remain unaffected (including the need for the user’s express consent to the’sending of newsletters pursuant to’art. 6 c. 1, lett. a) of the RGPD).
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits their unauthorized disclosure to third parties.
For the transmission of data to the U.S., the provider follows the European Commission's standard contractual clauses designed to ensure compliance with the European level of data protection.
10.2 Dotdigital
For the purpose of providing and synchronizing various services related to customer management, this site uses the software-based marketing service of the following provider: EMEA Ltd., No. 1 London Bridge, London, SE1 9BG, GB
This service enables automatic management of feed activities, piloting of advertising through the marketing channels used, analysis of the effectiveness of marketing actions as well as central management of mail marketing activities and contacts.
In order to provide the various functions, the service uses cookies, i.e. small text files stored locally in the cache of the browser used on the user’s device, which allow us to analyze the use of the site. The cookies detect certain data, including IP address, location, time and date of page view.
The treatments described above, and in particular the’setting of cookies aimed at detecting information present on the mobile device used, take place, according to’art. 6 c. 1 lett. a) of the RGPD, only against the’express consent of the’user. The’user has the option to revoke his/her consent at any time, with future effect, by deactivating this service with the’appropriate cookie consent tool on the site.
Other legal bases for data processing carried out in the context of specific services remain unaffected (including the need for the user’s express consent to the’sending of newsletters pursuant to’art. 6 c. 1, lett. a) of the RGPD).
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits their unauthorized disclosure to third parties.
In case of data transfer to the provider's premises, an adequate level of protection è guaranteed by an adequacy decision of the European Commission.
10.3 Salesforce Pardot
For the purpose of providing and synchronizing various services related to customer management, this site uses the software-based marketing service of the following provider: salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany
This service makes it possible to automatically manage feed activities, to drive advertising through the marketing channels used, to perform an’analysis of the’effectiveness of marketing actions as well as to centrally manage mail marketing activities and contacts.
In order to provide the various functions, the service uses cookies, i.e. small text files stored locally in the cache of the browser used on the user’s device, which allow us to analyze the use of the site. The cookies detect certain data, including IP address, location, time and date of page view.
The treatments described above, and in particular the’setting of cookies aimed at detecting information present on the mobile device used, take place, according to’art. 6 c. 1 lett. a) of the RGPD, only against the’express consent of the’user. The’user has the option to revoke his/her consent at any time, with future effect, by deactivating this service with the’appropriate cookie consent tool on the site.
Other legal bases for data processing carried out in the context of specific services remain unaffected (including the need for the user’s express consent to the’sending of newsletters pursuant to’art. 6 c. 1, lett. a) of the RGPD).
We have entered into a data processing agreement with the provider that guarantees the protection of our users' data and prohibits its unauthorized disclosure to third parties.
11) Web analytics service
11.1 Google (Universal) Analytics
This site uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). Google (Universal) Analytics makes use of so-called "cookies", text files deposited on the user's device that enable analysis of the user's use of the website. The information generated by the cookie about your use of the website (including your IP address in abbreviated form) is usually transmitted to and stored on a Google server. In this context, transmission of personal data to Google LLC servers in the United States may occur.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymity by truncating the user's IP address and thus preventing it from being able to be traced directly back to a specific person. Through said extension, in member states of the European Union or other states party to the Agreement on the European Economic Area, the user's IP address is truncated in advance by Google. Only in exceptional cases is the user's IP address sent to a Google server in the USA in full form to be truncated later. Google uses this information on our behalf to analyze your use of the website, to prepare reports on website activities and to provide us with further services related to the use of the website and the Internet. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics is not associated with any other data held by Google.
Through a dedicated function, Google Analytics enables the detection of so-called “demographic characteristics” and also to prepare statistics related to the ageà, gender and interests of those visiting the site, making use of the’analysis of interest-based advertisingà and information obtained from third-party providers. This makes it possible to define and differentiate groups of site users for the purpose of defining marketing measures geared toward said target groups. However, the datasets collected through “demographic characteristics” do not allow to be traced back to the individual person.
For more information about the data processing performed by Google Analytics and Google's management of website data we invite you to visit: https://policies.google.com
. The treatments described above, and in particular the saving of Google Analytics cookies aimed at detecting information present on the mobile device used, take place, according to Art. 6 c. 1 lett. a of the RGPD, only against the express consent of the user. In the absence of such consent, as part of the visit to the site Google Analytics will beà deactivated.
The user has the option to revoke his/her consent at any time with future effect. In order to exercise the right of revocation, the user can’deactivate the service using the’appropriate cookie consent tool available on the site.
On this website, the "Google Signals" service canò also be used as an extension of Google Analytics. With Google Signals, Google canò create reports on multiple devices (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google account settings and have connected your Internet-enabled devices to your Google account, Google canò analyze user behavior across devices and create database models based on this, provided that you have given your consent to the use of Google Analytics pursuant to Art. 6 c. 1 lett. a of the RGPD (see above). The logins and device types of all visitors to the page who have logged into a Google account and made a conversion are taken into account. The data show, among other things, on which device the user first clicked on an ad and on which device they made the relevant conversion. To the extent that Google Signals is used, we do not receive any personal data from Google, only statistics compiled on the basis of Google Signals. You have the option to disable the "personalized ads" feature in your Google account settings, thus disabling cross-device analytics.
To do so, follow the instructions on this page: https://support.google.com
. More information is available here: https://support.google.com
As an extension of Google Analytics, on this site è you can also use the "UserIDs" feature. By assigning individual UserIDs, Google canò create reports on multiple devices (so-called "cross-device tracking"). This means that your usage behavior can also be analyzed across devices, if you have given your consent to the use of Google Analytics pursuant to Article 6 c. 1 lit. a of the RGPD, if you have created a personal account by registering on this website, and if you have logged in to your personal account on several end devices with the corresponding login data. The data thus collected show, among other things, on which end device you first clicked on an ad and on which end device è the relevant conversion took place.
With Google è a data processing agreement has been concluded for the use of Google Analytics, which obliges the company’to protect the personal data of visitors to our site and prohibits its forwarding to third parties.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
For more information about Google (Universal) Analytics è you can see the page: https://business.safety.google
11.2 Google Analytics 4
This site uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google”) that enables analysis of website usage
The’use of Google Analytics 4 normally involves the’use of so-called “cookies”. Cookies are text files stored on the user's device that enable analysis of the user's use of the website. The information generated by the cookie about the use of the website (including the user's IP address in abbreviated form transmitted by the respective device, see below) is normally transmitted, stored and processed at a Google server in the United States. Some data may also be transmitted to Google LLC servers in the United States, where further processing takes place.
In the event of a visit to our site, Google Analytics 4 automatically detects and processes the IP address of the user’s device only in anonymized form, which prevents the data collected from being traced back to the individual person to whom it relates. In European Union (EU) member states or other European Economic Area (EEA) member states, automatic anonymization is done by Google's prior truncation of the last digits of the IP address transmitted from the device.
Google uses on our behalf this and other information to analyze your use of the website, to prepare reports on website activities, i.e. user behavior, and to provide us with further services related to the’use of the website and the internet. In the context of Google Analytics 4, the IP address transmitted from the user’s device and truncated is not associated with other data held by Google. The data collected in the context of Google Analytics 4 is stored for 2 months and then deleted.
Through a dedicated function, Google Analytics 4 enables the detection of so-called “demographic characteristics” and also to prepare statistics related to ageà gender and interests of those who visit the site, making use of interest-based advertising’analysis and making use of information obtained from third-party providers. This makes it possible to define and differentiate groups of site users for the purpose of appropriately targeting marketing measures to target groups. However, the datasets collected through “demographic characteristics” do not allow the data to be traced back to the individual person. Data collected through “demographic characteristics” are retained for two months and then deleted.
The processing described above, and in particular the creation of cookies by Google Analytics aimed at detecting and saving information present on the mobile device used to visit the site, take place, according to’art. 6 c. 1 lett. a of the RGPD, only against the’express consent of the’user. In the absence of the user’s consent, upon visiting the site Google Analytics 4 will be deactivated. The’user has the option to revoke the consent given with future effect at any time. In order to exercise the right of revocation, the user can’deactivate the service using the’appropriate cookie consent tool available on the website.
On this website, the "Google Signals" service can also be used as an extension of Google Analytics. With Google Signals, Google canò create reports on multiple devices (so-called "cross-device tracking"). If you have activated "personalized ads" in your Google account settings and have connected your Internet-enabled devices to your Google account, Google canò analyze user behavior across devices and create database models based on this, provided that you have given your consent to the use of Google Analytics pursuant to Art. 6 c. 1 lett. a of the RGPD (see above). The logins and device types of all visitors to the page who have logged into a Google account and made a conversion are taken into account. The data show, among other things, on which device the user first clicked on an ad and on which device they made the relevant conversion. To the extent that Google Signals is used, we do not receive any personal data from Google, only statistics compiled on the basis of Google Signals. You have the option to disable the "personalized ads" feature in your Google account settings, thus disabling cross-device analytics.
To do so, follow the instructions on this page: https://support.google.com
. More information is available here: https://support.google.com
As an extension of Google Analytics, on this site è you can also use the "UserIDs" feature. By assigning individual UserIDs, Google canò create reports on multiple devices (so-called "cross-device tracking"). This means that your usage behavior can also be analyzed across devices, if you have given your consent to the use of Google Analytics pursuant to Article 6 c. 1 lit. a of the RGPD, if you have created a personal account by registering on this website, and if you have logged in to your personal account on several end devices with the corresponding login data. The data thus collected show, among other things, on which end device you first clicked on an ad and on which end device è the relevant conversion took place.
With Google è a data processing agreement has been concluded for the use of Google Analytics 4, which obliges the company’to protect the personal data of visitors to our site and prohibits its forwarding to third parties.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
For further legal guidance regarding Google Analytics 4 and to obtain copies of those standard contractual clauses, please refer to the following link: https://policies.google.com
For more information about data processing by Google Analytics 4 and Google's handling of website data, please see: https://business.safety.google
12) Retargeting / Remarketing / Advertisingà on Recommendation
Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising means (so-called Google Adwords). We can determine the success of individual advertising measures in relation to ad campaign data. Our goal è to show you advertisementsà of your interest, to make our website more interesting for you and to obtain a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an advertisement published by Google. Cookies are small text files that are stored on the user's end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not è yet expired, Google and we can recognize that the user has clicked on the ad and è been redirected to this page. Each Google Ads client receives a different cookie. Therefore, cookies cannot be tracked on the websites of Google Ads clients. The information obtained through the conversion cookie is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page marked with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. Use of Google Ads mayò also result in the transmission of personal data to Google LLC. servers in the United States.
Details about the data processing triggered by Google Ads' Conversion Tracking and Google's processing of website data are available here: https://policies.google.com
All processing described above, in particular the setting of cookies to read information about the end device used, will only be performed if you have given us your explicit consent in accordance with Art. 6 (1) a RGPD. You may revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
È you can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com
Please note that some features of this website may not be available or may be limited if you have disabled the use of cookies.
Google's privacy policy canò be viewed here: https://business.safety.google
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
13) Functionality of web pages
13.1 YouTube
This website uses plugins for the purpose of offering and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
The above data may also be transmitted to: Google LLC., USA
When you open a page on our website containing one of these plugins, your browser will establish a direct connection to the provider's servers in order to load the plugin in question from time to time. In this context, data about the user, including the user’s IP address, is transmitted to the provider.
At the time when the user initiates the playback of embedded videos via the plugin, the provider also uses cookies to collect information about the user’s behavior, prepare playback statistics and prevent possible abuse.
If prior to viewing the page the user logs into the provider’s user account, clicking to start the video such data will be directly associated with that account. If you do not want the data to be associated with your account, before using the commands for playback the’user will have to log out of that account.
The treatments described above, and in particular the’setting of cookies aimed at collecting information present on the mobile device used, take place only against the’express consent of the’user, pursuant to’art. 6 c. 1 lett. f) of the RGPD. The’user has the option of revoking his/her consent at any time, with future effect, by deactivating this service with the’appropriate cookie consent tool on the site.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
13.2 Google Meet
For online meetings, video conferencing and/or webinars we use this provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
The data will also be transferred to: Google LLC., USA
The provider processes various data, the volume of which depends on the data you provide before or during your participation in an online meeting, video conference or webinar. Your data as a participant in the communication is processed and stored on the provider's servers. These are, in particular, registration data (name, e-mail address, phone number (optional) and password) and session data (topic, participant's IP address, device information, description (optional)).
In addition, è audio and image contributions of participants, as well as voice contributions in chats may be processed.
For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary for the implementation of pre-contractual measures), Art. 6 (1) lit. b GDPR serves as the legal basis. If you have given us consent to process your data, the processing is based on Art. 6 (1) a GDPR. You may revoke your consent at any time with effect for the future.
In addition, the legal basis for the processing of data in the context of online meetings, video conferences or webinars è of our legitimate interest, pursuant to Art. 6 (1) lit. f RGDP, in the effective conduct of the online meeting, webinar or video conference.
We have entered into a contract with the provider, which guarantees the protection of our site visitors' data and prohibits their unauthorized disclosure to third parties.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
More information on Google's data protection is available here: https://business.safety.google
13.3 Zoom
For online meetings, video conferencing and/or webinars we use this provider: Zoom Video Communications Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA
The provider processes a variety of data, the volume of which depends on the data you provide before or during your participation in an online meeting, video conference, or webinar. Your data as a participant in the communication is processed and stored on the provider's servers. These are, in particular, registration data (name, e-mail address, phone number (optional) and password) and session data (topic, participant's IP address, device information, description (optional)).
In addition, è audio and image contributions of participants, as well as voice contributions in chats may be processed.
For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary for the implementation of pre-contractual measures), Art. 6 (1) lit. b GDPR serves as the legal basis. If you have given us consent to process your data, the processing is based on Art. 6 (1) a GDPR. You may revoke your consent at any time with effect for the future.
In addition, the legal basis for the processing of data in the context of online meetings, video conferences or webinars è of our legitimate interest, pursuant to Art. 6 (1) lit. f RGDP, in the effective conduct of the online meeting, webinar or video conference.
We have entered into a contract with the provider, which guarantees the protection of our site visitors' data and prohibits their unauthorized disclosure to third parties.
For data transfers to the United States, the provider has adhered to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
14) Miscellaneous
Cookie Consent Tool
In order to obtain user consent to cookies and cookie-based applications that require it, this website employs a special cookie consent tool. Said tool appears to users when they open the site in the form of an interactive banner in which the’user, by placing a check mark, gives consent to certain cookies and/or cookie-based applications. In this context of using the tool, cookies/services that compulsorily require consent will be loaded only after the respective consents have been ticked by the’user. In this way è it is possible to ensure that cookies are saved on the user’s device only against the consent given.
This tool installs cookies that are technically necessary to save the user’s preferences. No personal data of the’user are processed in this context.