Introduction

We appreciate your interest in Valkental GmbH (hereinafter“we,”“us”) and thank you for visiting our website.

The information provided below gives you an overview of how we process your personal data on our website https://valkental.de (hereinafter referred to asthe “website”).

We would also like to inform you of your rights under data protection laws. Our processing of your personal data is always carried out in accordance with the General Data Protection Regulation (hereinafter“GDPR”), the Act on Data Protection and the Protection of Privacy in Telecommunications and Telemedia (hereinafter“TTDSG”), and all applicable state-specific data protection regulations.

1 Responsibility

The controller within the meaning of the GDPR is the

Valkental GmbH

9 Rheinpromenade

40789 Monheim am Rhein

Germany

 

Phone 1: +49 1573 2630598

Phone 2: +49 1781 796561

Email: support@valkental.de

2 Data Protection Officer

You can contact our data protection officers as follows:

Antonio Detering

12 Brucknerstraße

47057 Duisburg

 

Phone: +49 157 89 553418

Email:a.detering@valkental.de

If you have any questions or suggestions regarding data protection or the exercise of your rights, you can contact our Data Protection Officer directly at any time.

3 Definition

This Privacy Policy is based on the terminology of the GDPR. For clarity, we would like to explain a few key terms in this context in more detail:

• Personal Data: Personal data refers to any information relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by association with an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

 

• Data Subject: A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
• Processing: Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of disclosure, the matching or linking, the restriction, erasure, or destruction.
• Recipient: A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.
• Third Party: A third party is a natural or legal person, public authority, agency, or other entity other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
• Consent: Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed in the form of a statement or other clear affirmative action, by which the data subject indicates that he or she consents to the processing of personal data relating to him or her.

4 Source of Personal Data

We may collect personal information in the following ways:

4.1 Information Provided by You

You have the option to provide information about yourself (e.g., contact information) on our website.

4.2 Automatically Collected and Generated Data

When you use our website, data is automatically collected and generated.

4.3 Data Collected by Third Parties

To the extent that we maintain a presence on social and professional networks, we may receive data about you through these channels (for example, if you contact us via a social or professional network or respond to content we’ve shared there).

5 Scope, purpose, legal basis, retention period, and, where applicable, recipients and transfers to third countries in connection with the respective processing of personal data

5.1 General Information

Below, we provide an overview of the personal data we process. To this end, we explain the scope of our processing, the purposes for which we process personal data, and the legal basis for such processing.

We will not disclose your personal data to third parties without your consent, unless permitted by law (e.g., because it is necessary to fulfill the contract).

The processing of your personal data may be based, in particular, on the following legal grounds:

• Article 6(1), first sentence, subparagraph (a) of the GDPR serves as our legal basis for processing operations in which we obtain consent for a specific processing activity.
• If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Article 6(1), first sentence, subparagraph (b) of the GDPR. The same applies to processing operations necessary for the implementation of precontractual measures.
• If we are subject to a legal obligation that requires the processing of personal data, such processing is based on Article 6(1), first sentence, subparagraph (c) of the GDPR.
• Furthermore, processing operations may be based on Article 6(1), first sentence, subparagraph (f) of the GDPR. Processing operations are based on this legal basis when the processing is necessary to safeguard a legitimate interest of ours, provided that the interests, fundamental rights, and fundamental freedoms of the data subject do not take precedence.

5.2 Data Transfers to Third Countries

Among other things, we use services provided by companies based in third countries (e.g., the United States). When these services are active, there is a possibility that data may be transferred to a third country and processed there. Please note that these countries cannot guarantee a level of data protection comparable to that of the EU.

For example, U.S. companies are required to disclose data to government agencies or similar institutions when necessary, and under our understanding of the law, you, as the data subject, cannot file an effective legal appeal against such disclosure. We have no control over such data transfers.

5.3 Deletion of Data

Unless a specific retention period is specified in this Privacy Policy, the data we process will be deleted in accordance with legal requirements as soon as the consent authorizing its processing is revoked or other legal grounds for processing no longer apply (e.g., if the purpose for which the data was processed no longer exists or the data is no longer necessary for that purpose). If the data is not deleted because it is required for other, legally permissible purposes, its processing will be limited to those purposes. This means that the data will be blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary to assert, exercise, or defend legal claims, or to protect the rights of another natural or legal person.

5.4 Security Measures

In accordance with legal requirements, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihoods and severity of threats to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input of, and disclosure of the data, ensuring its availability, and maintaining its separation. Furthermore, we have established procedures that ensure the exercise of data subjects’ rights, the erasure of data, and responses to data breaches. Furthermore, we take the protection of personal data into account from the very beginning of the development or selection of hardware, software, and procedures, in accordance with the principle of data protection through technical design and privacy-friendly default settings.

5.5 Transfer of Personal Data

As part of our processing of personal data, the data may be transferred to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, service providers entrusted with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure the protection of your data.

5.6 The Website in General

5.6.1 Website Provision, Server Log Files

5.6.1.1     Scope of Processing

To host our website, we use storage space, computing capacity, and software that we lease from a server provider (web host). In addition, when you visit our website, data that your browser transmits to our server is automatically processed. This general data and information is stored in the server’s log files (so-called “server log files”). The following may be collected:

• Browser Type and Browser Version
• Operating system used
• Referrer URL (previously visited website)
• Hostname of the connecting computer
• Date and time of the server request
• IP address

5.6.1.2     Purpose of Processing

When using this data and information, we do not draw any conclusions about your identity. The purposes we pursue include, in particular:

• Hosting of Our Website
• Provision of Our Online Services and User-Friendliness
• Operation and Deployment of Information Systems
• Content Delivery Network (CDN)
• Performance of Contractual Obligations
• Customer Service
• Provision of Email Communication
• Ensuring that the website loads smoothly
• Investigation of acts of abuse or fraud,
• Problem Analysis in a Network
• Evaluation of system security and stability.

5.6.1.3     Legal Basis

The legal basis for data processing is our legitimate interest within the meaning of Article 6(1), first sentence, subparagraph (f) of the GDPR. We have a legitimate interest in ensuring that our website functions properly from a technical standpoint.

5.6.1.4     Recipients of Personal Data

Your data will be shared with hosting and Content Delivery Network (CDN) service providers to the extent necessary as part of data processing on our behalf:

• Cloudflare: Content Delivery Network (CDN) Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA; Privacy Policy: https://www.cloudflare.com/privacypolicy/; Use of Cookies
• Shopify: Website operator, Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada, Privacy Policy: https://www.shopify.com/legal/privacy

5.6.2 Cookies

5.6.2.1     General Information

We use cookies on our website.

These are text files that your browser automatically creates and that are stored on your computer when you visit our site. Cookies send certain information to the entity that set the cookie. The use of cookies does not allow programs to be executed or viruses to be transferred to your device.
If you do not wish to use cookies, you can disable them in your settings.

If you are visiting our website or a subpage for the first time and it contains cookies, a “cookie banner” will appear. You can allow us to use non-essential cookies and also revoke that decision there.

From a legal standpoint, a distinction must be made between necessary and non-necessary cookies.

5.6.2.2     Essential Cookies

We use necessary cookies. These are cookies that are technically necessary to provide all the functions of our website. The legal basis for data processing is our legitimate interest within the meaning of Article 6(1), sentence 1, subparagraph (f) of the GDPR. We have an overriding legitimate interest in being able to provide our services in a technically flawless manner. The legal basis for the use of cookies with respect to our contractual partners who utilize services we are contractually obligated to provide via our website is Article 6(1)(b) of the GDPR, namely the performance of our contractual obligations.

5.6.2.3     Non-essential cookies

We also use non-essential cookies (e.g., analytics and marketing cookies). These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our services. The legal basis for data processing is your consent pursuant to Art. 6(1)(a) of the GDPR. The cookies are not set until you have given your consent via our “cookie banner.”

5.6.2.4     Retention Period

With regard to storage duration, the following types of cookies are distinguished:

• Temporary cookies (also known as session cookies):Temporarycookies are deleted at the latest after a user leaves a website and closes their device (e.g., browser or mobile app).
• Persistent cookies:Persistentcookies remain stored even after the device is turned off. This allows, for example, the user’s login status to be saved or preferred content to be displayed immediately when the user visits a website again. Similarly, user data collected via cookies may be used for audience measurement. Unless we provide users with explicit information regarding the type and retention period of cookies (e.g., when obtaining consent), users should assume that cookies are persistent and may be stored for up to two years.

5.6.3 Our Use of Cookies

The following table explains which cookies we use on our website and why:

Category	Cookie	Vendor	Retention period in days
Required Essential cookies are absolutely necessary for the operation of our website(s) and applications. For example, they enable us to provide the shopping cart feature. Without these cookies, we cannot offer the desired services. In addition, these cookies serve security purposes. No consent is required.	AWSALBTGCORS	Amazon Web Services	7
	cart_currency	Shopify	14
	cookieconsent_status	osano	365
	__kla_id		400
	__kla_viewed		unlimited
	_checkout_queue_chec kout_token		1
	_checkout_queue_toke n		1
	amazon-pay-connected Auth		1
	apay-session-set		365
	cart		14
	cart_ver		14
	checkout		21
	chrls_debug		unlimited
	chrls_init_event		unlimited
	csync		366
	dmc-12		366
	dmc-12-r		366
	dynamic_checkout_sho wn_on_cart		1
	klaviyoOnsite		unlimited
	locale_bar_accepted		Session
	localization		366
	n4f60g07		unlimited
	pid		397
	po_visitor		po_visitor
	pushowl_landing_page _url		Session
	pushowl_landing_page _url_params		Session
	pushowl_original_url _params		unlimited
	pushowl_referrer		Session
	pushowl_session_token n		Session
	pushowl_shopify_conf ig-1.5-1a5798d7-e339 -40db-b9dc-31a5b4fe2 ff2		Session
	pushowl_task_type		Session
	pushowl_visitor_token n		unlimited
	reviewsIo_averageRating ing		unlimited
	reviewsIo_reviewCoun t		unlimited
	secure_customer_sig		366
	TriplePixel		unlimited
	TriplePixelU		unlimited
	tuuid		365
	__cf_bm	CloudFlare	1
	_cmp_a	Shopify CDN	1
	_landing_page		14
	_orig_referrer		14
	_s		1
	_secure_session_id		1
	_shopify_s		1
	_shopify_sa_p		1
	_shopify_sa_t		1
	_shopify_y		365
	_y		365
	cart_sig		14
	cart_ts		14
	checkout_token		366
	TestIfCookieP		397
	tf_respondent_cc	Typeform	183
	attribution_user_id		365
	__paypal_storage__	PayPal	unlimited
	enforce_policy		365
	l7_az		1
	LONG		1
	nsid		Session
	ts_c		400
	ts		400
	tsrce		3
	x-pp-s		Session
session-id-apay	Amazon Payments	365
session-id-time		365
session-id		365
session token		365
Functional These are non-essential cookies. With your consent, these cookies allow us to save the choices or changes you have made.	_gcl_au	Google	90
	bcookie	LinkedIn	365
	bscookie		365
	lidc		1
	UserMatchHistory		30
	VISITOR_INFO1_LIVE	YouTube	180
	YSC		Session
Analysis These are non-essential cookies. These cookies collect information about how visitors use our website. We use this information, with your consent, to better understand the behavior of website visitors.	_clck	Microsoft Clarity	365
	_clsk		1
	_cltk		Session
	ANONCHK		1
	CLID		365
	SM		Session
	_gaexp	Google Analytics	88
	_gid		1
	A3	Yahoo! Analytics	365
	IDSYNC		365
	ln_or	LinkedIn Analytics	1
Marketing With your consent, these cookies allow us to display personalized ads and social media content.	_tt_enable_cookie	TikTok	390
	_ttp		390
	tt_appInfo		Session
	tt_pageId		Session
	tt_pixel_session_ind ex		Session
	tt_sessionId		Session
	AnalyticsSyncHistory	LinkedIn Widgets	30
	li_gc		180
	8lcfmzhxc8d6_uid	The Reach Group	90
	_fbp	Facebook Pixel	90
	_rxuuid	Rhythmone Beacon	365
	am-uid	Admixer	90
	audience	SpotX	28
	c	Bidswitch	365
	C	Adform	31
	cct	AdScale	363
	CMID	Index Exchange	365
	CMPRO		90
	CMPS		90
	dc	Between Digital	365
	eng_mt	Taboola	unlimited
	IDE	DoubleClick	390
	jg2kf3qb0kis_uid	NEORY	90
	KRTBCOOKIE_466	PubMatic	90
	MR	Bing Ads	7
	mt_misc	MediaMath	30
	MUID	Bing Ads	390
	PugT	PubMatic	30
	SRM_B	Adform	390
	ss	Between Digital	365
	test_cookie	DoubleClick	1
	do	AdScale	363
	tuuid_lu	Bidswitch	365
	u8x7eovwf3h6_uid	NEORY	90
	uid	Adform	60
	uids	MedyaNet	90
	around	Improve Digital	90
	umeh		90
	UserID1	Addition	90
	ut	Between Digita	365
	uu	AdScale	363
	uuid	MediaMath	393
	uuid2	AppNexus	90
	v930q3phzhqx_uid	NEORY	90
	viewer_token	LoopMe	92

 

5.6.4 Cookie Banner

5.6.4.1     Scope of Processing

Our cookie banner informs you about the specific cookies we use. We also give you the option to decide whether you want to consent to the use of non-essential cookies. The following may be processed:

• Usage data (e.g., websites visited, time of access)
• Meta and communication data (e.g., IP address)

5.6.4.2     Purpose of Processing

We process your personal data for the following purposes:

• Informing Users About the Cookies We Use
• Allowing users to consent to cookies that are not technically necessary

5.6.4.3     Legal Basis for Processing

The legal basis for the use of the cookie banner is Article 6(1), first sentence, subparagraph (f) of the GDPR. We have an overriding legitimate interest in using the cookie banner, which allows us to obtain the legally required consent for the use of non-essential cookies and to fulfill our obligation to provide information regarding cookies.

5.6.4.4     Retention Period

The cookie banner saves your preferences until you reset or adjust them.

5.6.4.5     Recipients of Personal Data

Your data will be shared with a cookie banner service provider to the extent necessary as part of data processing on behalf of the controller:

• Osano: Consent Tool, Osano Inc., 3800 N. Lamar Blvd., Suite 200, Austin, TX 78756, Privacy Policy: https://www.osano.com/legal/privacy

5.7 Ways to Contact Us

5.7.1 Scope of Processing

Through our website, you can contact us via email or by filling out a contact form.

When we contact you and respond to your inquiry, we process the following personal data about you:

• First and Last Name
• Email address
• Phone number
• Address Information
• Date and time of the request
• IP address
• Order Number
• Communication Content

5.7.2 Purpose of Processing

We process your data to respond to your inquiry and to address any other related matters.

5.7.3 Legal Basis

If your request relates to precontractual measures or to an existing contract with us, the legal basis is the performance of the contract and the implementation of precontractual measures pursuant to Article 6(1), first sentence, subparagraph (b) of the GDPR.

If your inquiry is made independently of any pre-contractual measures or existing contracts with us, our legitimate interests pursuant to Article 6(1), first sentence, (f) of the GDPR constitute the legal basis. We have a legitimate interest in providing visitors to our website with a way to contact us.

5.7.4 Retention Period

We will delete your personal data as soon as it is no longer necessary to achieve the purpose for which it was collected. In the context of contact requests, this is generally the case when the circumstances indicate that the specific matter has been fully resolved.

5.7.5 Recipients of Personal Data

Your data will be shared with a service provider to the extent necessary as part of data processing on our behalf:

• Klaviyo: Email Marketing, 225 Franklin St, Boston, MA 02110, USA, Privacy Policy: https://www.klaviyo.com/legal/privacy/privacy-notice
• United Domains: Mail server, United Domains AG, Gautinger Straße 10, 82319 Starnberg; Privacy Policy: https://www.uniteddomains.de/unternehmen/datenschutz/
• Typeform: Contact Form, Bac de Roda 163, Barcelona, Spain, Privacy Policy: https://admin.typeform.com/to/dwk6gt
  
  

5.8 Online Store

5.8.1 Scope of Processing

You can order our products through our website. To complete this process, we process your personal data. In particular, we process the following personal data:

• First and Last Name
• Email address
• Phone number
• Address
• Means of Payment
• Billing Address
• Communication Content

5.8.2 Purpose of Processing

We process your data to fulfill your order.

5.8.3 Legal Basis

If your inquiry relates to precontractual measures or an existing contract with us, the associated data processing operations are based on Article 6(1), sentence 1, subparagraph (b) of the GDPR.

5.8.1 Recipients of Personal Data

Your data will be shared with service providers to the extent necessary to process your product order or activation as part of data processing on behalf of the client:

• Shopify: Operation of the online store, Shopify Inc., 151 O’Connor Street, Ground Floor, Ottawa, ON K2P 2L8, Canada, Privacy Policy: https://www.shopify.com/legal/privacy
• Pushowl: Delivery of web-based push notifications, Creatorbox Software Private Limited, No. 39, 2nd Floor, NGEF Lane, Suite No. 909, Indiranagar First Stage, Bangalore, KA 560038, IN; Privacy Policy: https://pushowl.com/privacy
• AreViewsApp: Customer Reviews, Areviews Ltd., Privacy Policy: https://areviewsapp.com/privacy_policy
• Silyoapps: Goodies; Privacy Policy: https://www.stilyoapps.info/privacy-policy
• Conversion Bear: Upsell App, AppHub LLC, 116 Huntington Ave, 15th Floor, Boston, Massachusetts 02116, USA; Privacy Policy: https://www.apphub.com/privacy-policy
• Billbee Limited Liability Company, Order Processing, Arolser Str. 10, 34477 Twistetal, Germany; Privacy Policy: https://www.billbee.io/rechtliches/datenschutz
• SCA Logistik & Fulfillment GmbH: Warehousing, Logistics, Packing, Benzstraße 4, 85084 Reichertshofen; Privacy Policy: https://www.sca-muc.de/datenschutz/

 

5.9 Customer Account

5.9.1 Scope of Processing

During the ordering process, you have the option to create a customer account:

• First and Last Name
• Email address

5.9.2 Purpose of Processing

We process this data for the purpose of opening a customer account and storing your information for future orders on our website.

5.9.3 Legal Basis

The legal basis for creating your customer account is your voluntary consent pursuant to Article 6(1), first sentence, subparagraph (a) of the GDPR.

5.10 Paying in the Online Store

5.10.1 Scope of Processing

In our online store, you have the option to pay in various ways. To complete this process, we process your personal data. In particular, we process the following personal data:

• Means of Payment
• Billing Address

5.10.2 Purpose of the Processing

We process your data to fulfill your order.

5.10.3 Legal Basis

If your inquiry relates to precontractual measures or an existing contract with us, the associated data processing operations are based on Article 6(1), sentence 1, subparagraph (b) of the GDPR.

5.10.4 Recipients of Personal Data

Your data will be shared with service providers to the extent necessary to process the payment as part of data processing on our behalf:

• PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
• Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
• Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg
• Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
• Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5
• Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

5.11 Newsletter

5.11.1 Scope of Processing

If you would like to receive information about our new products and services, we can keep you informed via our newsletter, provided you consent to receiving newsletters.

You can revoke your consent to receive our newsletters at any time by clicking the unsubscribe link in our emails or by sending an email to support@valkental.de or by mail to the contact information provided in the legal notice. Your personal data will then be removed from the mailing list.

Our newsletters contain so-called tracking links, which allow us to analyze the behavior of newsletter recipients. For example, we can analyze how many recipients opened the newsletter and how often each link in the newsletter was clicked.  This enables us to statistically evaluate the success or failure of online marketing campaigns. We store and analyze the personal data collected through the tracking links in order to optimize the distribution of the newsletter and tailor the content of future newsletters even better to your interests.

As part of our newsletter distribution, we process the following personal data, among other things:

• Email address
• First and Last Name
• Organization
• Preferred Language
• Metadata (e.g., device information, IP address, date and time of login)
• Interaction with the Newsletter

5.11.2 Purpose of Processing

We process your personal data for the following purposes:

• Newsletter Distribution: Implementation of Marketing Initiatives
• Newsletter Tracking: Measuring Success

5.11.3 Legal Basis

The legal basis for sending our newsletter is your consent, in accordance with Article 6(1)(a). You may withdraw your consent at any time with future effect. The legal basis for newsletter tracking is our legitimate interest in determining whether our newsletter meets your interests and expectations, in accordance with Article 6(1)(f) of the GDPR.

5.11.4 Recipients of Personal Data

Your data will be shared with a newsletter service provider to the extent necessary as part of data processing on our behalf:

• Klaviyo: Email Marketing, 225 Franklin St, Boston, MA 02110, USA, Privacy Policy:https://www.klaviyo.com/legal/privacy/privacy-notice
• United Domains: Mail server, United Domains AG, Gautinger Straße 10, 82319 Starnberg; Privacy Policy: https://www.united-domains.de/unternehmen/datenschutz/
  
  

5.12 Customer Relationship Management System

5.12.1 Scope and Purpose of Processing

We use features of a customer relationship management system (“CRM system”) on this website. Among other things, the CRM system enables us to manage existing and potential customers as well as customer contacts and to organize sales and communication processes. Using the CRM system also allows us to analyze and optimize our customer-related processes. Details about the features of the CRM system we use can be found here:

 As a result, we process the following data, among other things:

• Email address
• First and Last Name
• Address
• IP address
• Phone number

5.12.2 Legal Basis

The use of the CRM is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in managing our customer relationships and communicating with customers as efficiently as possible. If consent has been obtained, processing is based exclusively on Article 6(1)(a) of the GDPR; consent may be withdrawn at any time via our cookie banner.

5.12.3 Recipients of Personal Data

Your data will be shared with a CRM system service provider to the extent necessary as part of data processing on our behalf:

• Zendesk: Zendesk Inc., 1019 Market Street, San Francisco, CA 94103; Privacy Policy: https://www.zendesk.de/company/agreements-and-terms/privacy-notice/

5.13 Google Tag Manager

5.13.1 Scope and Purpose of Processing

We use Google Tag Manager to manage the use of code snippets (“tags”), such as tracking code on our website. Google Tag Manager allows us to quickly and easily update code on our website via a web interface without having to modify the source code.

Through Google Tag Manager, we process the following personal data, among other things:

• IP address
• Device information, such as operating system, browser version, and screen resolution

5.13.2 Legal Basis

The legal basis for the use of Google Tag Manager, in accordance with Article 6(1)(a) of the GDPR, is the voluntary and revocable consent you have provided. You may revoke your consent at any time with future effect by making the appropriate changes or adjustments to your cookie settings.

5.13.3 Retention Period

Google anonymizes personal data after 9 months, unless there are legal obligations to retain it.

5.13.4 Recipients of Personal Data

Your data will be shared with Google Ireland Ltd. to the extent necessary as part of a data processing agreement.

5.14 Web Analytics

5.14.1 Scope and Purpose of Processing

This website uses features that allow us to analyze your user behavior in order to make decisions regarding product and marketing optimization based on the results. Among other things, the following personal data is processed:

• Date of the inquiry
• IP addresses
• Online Labels
• Device IDs
• Users' technical characteristics (e.g., browser type and version, device type, operating system)
• Measuring user behavior (e.g., page views / content views, views of content in different sections, session duration / time spent on site, bounce rate)
• Use of specific features of the website (e.g., search queries, downloads)
• E-commerce activity (e.g., products purchased, sales)
• Referrer URL (the previously visited page)

5.14.2 Legal Basis

The legal basis for the use of web analytics services is your voluntary and revocable consent, in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by making the appropriate changes or adjustments to your cookie settings.

5.14.3 Retention Period

Personal data is anonymized by Google, among others, 14 months after your last activity, provided there are no legal obligations to retain it.

5.14.4 Recipients of Personal Data

Your data will be shared with the following providers to the extent necessary as part of data processing on our behalf:

• Google Analytics: Google Ireland Limited, Google Building, Gordon House, 4 Barrow St, Dublin, Ireland; Privacy Policy: https://www.google.com/intl/de/policies/privacy/
• Clarity: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; Privacy Policy: https://docs.microsoft.com/en-us/clarity/faq
• LinkedIn Analytics: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland Privacy Policy: https://www.linkedin.com/legal/privacy-policy
• Lucky Orange: Lucky Orange LLC, 8680 W. 96th Street, Suite 200, Overland Park, KS 66212, USA; Privacy Policy: https://www.luckyorange.com/legal/privacy
• Triple Whale: Triple Whale Inc., 7th Floor, 224 Jaffa St., Jerusalem, Israel; Privacy Policy: https://www.triplewhale.com/pages/privacy-notice

 

5.15 Advertising Services

5.15.1 Scope of Processing

Advertising services are used to target visitors to the website. Target groups can be created, such as those who have visited certain pages. This makes it possible to identify users on other websites and display targeted advertisements. Cookies are placed on the user’s computer for this purpose. This allows personal data to be stored and analyzed, particularly

• the user's activity (specifically, which pages were visited and which elements were clicked on),
• Device and browser information (in particular, the IP address and operating system),
• Data about the ads displayed (specifically, which ads were shown and whether the user clicked on them) and
• as well as data from advertising partners (in particular, pseudonymized user IDs).

5.15.2 Purpose of the Processing

Advertising services are used to target specific audiences so that, when they visit the website, they are shown ads that match their interests.

5.15.3 Legal Basis

The legal basis for the use of advertising services is your voluntary and revocable consent, in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by making the appropriate changes or adjustments to your cookie settings.

5.15.4 Retention Period

Personal data is anonymized by Google, among others, 14 months after your last activity, provided there are no legal obligations to retain it.

5.15.5 Recipients of Personal Data

Your data will be shared with the following providers to the extent necessary as part of data processing on our behalf.

• Google AdServices: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
• Google DoubleClick: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
• Adcell: Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin; Privacy Policy: https://www.adcell.de/datenschutz
• Bing Ads: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
• Taboola: Taboola, Inc., 16 Madison Square West, 7th Floor, New York, NY 10010; Privacy Policy: https://www.taboola.com/policies/privacy-policy

 

 

5.16 Facebook Pixel - Joint Responsibility with Facebook

5.16.1 General Information

We use the so-called “Facebook Pixel” from Meta Platforms Ireland Limited (“Meta”)—formerly Facebook Ireland Limited—on our websites under joint responsibility.

When you visit our website using your browser, the Facebook Pixel embedded on this site will store a cookie on your system, provided you have given your consent. The legal basis for this is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by making the appropriate changes or adjustments to your cookie settings.

The data controllers within the meaning of Article 26 of the GDPR are:

• Meta Platforms, Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
• Valkental GmbH, Rheinpromenade 9, 40789 Monheim am Rhein, Germany

5.16.2 Joint Liability Agreement

The joint controller agreement pursuant to Article 26(1), second sentence, of the GDPR is available at:https://www.facebook.com/legal/controller_addendum

5.16.3 Data Processing by Meta

All information collected by the cookie is forwarded to Meta and allows Meta to draw conclusions about your user behavior. If you are registered on a Meta platform or service, Meta can associate this visit with you. Even if you are not registered on a Meta platform or service, or are not logged in, it is possible that Meta may receive your IP address and other identifying characteristics and store them in a way that allows them to be associated with you.

For more information regarding the data processing activities for which Meta is responsible, please refer to the following sources, for example:

• Meta Terms of Use:https://www.facebook.com/legal/terms/update
• Data Policy:https://de-de.facebook.com/privacy/explanation

5.17 Social Media Presence

5.17.1 General Information

We use third-party platforms to provide you with information about our company, products, and services. This involves processing interactions such as messages, likes, and content on our social media channels.

In addition, we receive non-personal data from third-party platforms, such as the total number of campaigns run by the platform operator or preferred times for visits and posts. We have no influence over the creation or provision of this data. The legal basis for processing in this case is Article 6(1)(f) of the GDPR; our legitimate interest lies in improving our marketing activities.

The processing of personal data associated with this takes place exclusively under the responsibility of the platform operators. Further information on data processing can be found in the privacy policies of the respective providers:

• Instagram:https://de-de.facebook.com/help/instagram/519522125107875
• Facebook:https://www.facebook.com/privacy/policy/
• YouTube:https://policies.google.com/privacy
• LinkedIn:https://www.linkedin.com/legal/privacy-policy?_l=de_DE
• TikTok:https://www.tiktok.com/legal/page/eea/privacy-policy/en

5.18 Integration of Third-Party Services and Content

5.18.1 General Information

We use third-party content or services within our online platform to integrate their content and services, such as videos or fonts (hereinafter collectively referred to as “Content”).

This always requires that the third-party providers of this content collect users’ IP addresses, since they would not be able to send the content to users’ browsers without them. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These “pixel tags” allow information—such as visitor traffic on the pages of this website—to be analyzed. This pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, and other details regarding the use of our online service; it may also be linked to such information from other sources.

5.18.2 Google Fonts
Embedding fonts: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland; Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.3 Google Photos
Integration of Photos: Google Photos, Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.4 Google Videos
Embedding videos: Google Videos, Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.5 Google Maps
Embedding maps: Google Maps, Google Ireland Limited, Google Building, Gordon House, 4 Barrow St, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.6 Review widget
Customer reviews on Google: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, Ireland, Privacy Policy: https://www.review-widget.net/privacy.html

5.18.7 Weglot
Language settings: Weglot SAS, 138, rue Pierre Joigneaux, Bois-Colombes 92270, France; Privacy Policy: https://weglot.com/privacy/

6 Your Rights

In this section, we provide information about your rights regarding the processing of your data. You can find the exact scope of each right mentioned in the corresponding article of the GDPR. If you wish to exercise any of your rights, please contact us via email (support@valkental.de).

6.1 Right to Confirmation

You have the right to request confirmation from us as to whether we are processing personal data concerning you.

6.2 Right of Access (Art. 15 of the GDPR)

You have the right to receive, at any time and free of charge, information from us regarding the personal data we have stored about you, as well as a copy of this data, in accordance with the provisions of the law.

6.3 Rectification (Art. 16 of the GDPR) 

You have the right to request the correction of inaccurate personal data concerning you. Furthermore, you have the right to request that incomplete personal data be completed, taking into account the purposes of the processing.

6.4 Erasure (Art. 17 of the GDPR)

You have the right to request that we delete personal data concerning you without delay if any of the grounds provided for by law apply and provided that the processing or storage of such data is not necessary.

6.5 Restriction of Processing (Art. 18 GDPR) 

You have the right to request that we restrict the processing of your personal data if any of the legal requirements are met.

6.6 Data Portability (Art. 20 of the GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit this data to another controller to whom the personal data has been provided, without hindrance from us, provided that the processing is based on consent pursuant to Art. 6(1), sentence 1, subparagraph (a) of the GDPR or Art. 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1), first sentence, (b) of the GDPR, and the processing is carried out by automated means, provided that the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In addition, when exercising your right to data portability pursuant to Article 20(1) of the GDPR, you have the right to have your personal data transmitted directly from one controller to another, provided that this is technically feasible and does not infringe upon the rights and freedoms of others.

6.7 Right to Object (Art. 21 of the GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of data processing in the public interest pursuant to Article 6(1), first sentence, subparagraph (e) of the GDPR or on the basis of our legitimate interest pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

6.8 Withdrawal of Consent Under Data Protection Law

You have the right to withdraw your consent to the processing of personal data at any time, effective for the future.

6.9 Filing a Complaint with a Regulatory Authority

You have the right to file a complaint with a data protection supervisory authority regarding our processing of personal data.

7 Updates and Changes to the Privacy Policy

This Privacy Policy is currently in effect and is dated March 2023.

If we make changes to our website or our services, or if legal or regulatory requirements change, it may be necessary to update this Privacy Policy. You can view the most current version of the Privacy Policy here at any time.

Use of SalesViewer® technology:

This website uses SalesViewer® technology provided by SalesViewer® GmbH to collect and store data for marketing, market research, and optimization purposes based on the website operator’s legitimate interests (Art. 6(1)(f) GDPR).

For this purpose, a JavaScript-based code is used to collect company-related data and process it accordingly. The data collected using this technology is encrypted using a one-way function that cannot be reversed (known as hashing). The data is immediately pseudonymized and is not used to personally identify visitors to this website.

The data stored via Salesviewer is deleted as soon as it is no longer necessary for its intended purpose and no statutory retention obligations prevent its deletion.

You may object to the collection and storage of data at any time with future effect by clicking this link https://www.salesviewer.com/opt-out to prevent SalesViewer® from collecting data on this website in the future. This will place an opt-out cookie for this website on your device. If you delete your cookies in this browser, you will need to click this link again.