Introduction

Thank you for your interest in Valkental GmbH (hereinafter "we", "us") and for visiting our website.

The following information provides you with an overview of the processing of your personal data on our website https://valkental.de (hereinafter "website").

We would also like to inform you about your rights under data protection laws. We always process your personal data in accordance with the General Data Protection Regulation (hereinafter "GDPR"), the Act on Data Protection and the Protection of Privacy in Telecommunications and Telemedia (hereinafter "TTDSG") and all applicable country-specific data protection regulations.

1 Responsibility

Responsible within the meaning of the GDPR is

Valkental GmbH

Rhine promenade 9

40789 Monheim on the Rhine

Germany

 

Phone 1: +49 1573 2630598

Phone 2: +49 1781 796561

E-mail: support@valkental.de

2 Data protection officer

You can reach our data protection officer as follows

Antonio Detering

Brucknerstrasse 12

47057 Duisburg

 

Phone: +49 157 89 553418

E-mail: a.detering@valkental.de

You can contact our data protection officer directly at any time with any questions or suggestions regarding data protection and the exercise of your rights.

3 Definition

This privacy policy is based on the terminology of the GDPR. To simplify matters, we would like to explain some important terms in this context in more detail:

• Personal data: Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

• Data subject: Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
• Processing: Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
• Recipient: A recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
• Third party: A third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
• Consent: Consent is any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

4 Origin of the personal data

We may receive personal data in the following ways:

4.1 Information provided by you

You have the opportunity to provide information (e.g. contact details) about yourself on our website.

4.2 Automatically collected and generated data

When you use our website, data is automatically collected and generated.

4.3 Data collected by third parties

If we maintain a presence on social and professional networks, we may receive data from you via these networks (e.g. if you contact us via a social or professional network or respond to one of our contents shared there).

5 Scope, purpose, legal basis, storage period and, if applicable, recipients and third country transfer of the respective processing of personal data

5.1 General information

Below we provide you with an overview of which personal data we process. To this end, we explain to what extent, for what purposes and on what legal basis we process personal data.

We will not pass on your personal data to third parties without your consent, unless this is permitted by law (e.g. because this is necessary for the performance of the contract).

The processing of your personal data may be based in particular on the following legal bases:

• 6 para. 1, sentence 1 lit. a) GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing operation.
• If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Art. 6 para. 1 sentence 1 lit. b) GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures.
• If we are subject to a legal obligation which requires the processing of personal data, the processing is based on Art. 6 para. 1 sentence 1 lit. c) GDPR.
• Furthermore, processing operations may be based on Art. 6 para. 1 sentence 1 lit. f) GDPR. Processing operations are based on this legal basis if the processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

5.2 Data transfers to third countries

Among other things, we use services from companies based in third countries (e.g. in the USA). If these services are active, it is possible that data may be transferred to a third country and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.

US companies are, for example, obliged to disclose data to authorities or similar institutions, without you as the data subject being able to appeal against this in accordance with our legal understanding. We have no influence on such data transfer.

5.3 Deletion of data

Unless a specific storage period is specified in this data protection notice, the data processed by us will be erased in accordance with the statutory provisions as soon as the consent permitted for processing is revoked or other permissions cease to apply (e.g. if the purpose for processing this data no longer applies or it is not required for the purpose). If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted to these purposes. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise or defense of legal claims or to protect the rights of another natural or legal person.

5.4 Safety measures

We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the different probabilities of occurrence and the extent of the threat to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data as well as the access, input, disclosure, safeguarding of availability and its separation. Furthermore, we have established procedures that ensure the exercise of data subject rights, the deletion of data and responses to data threats. Furthermore, we already take the protection of personal data into account during the development or selection of hardware, software and processes in accordance with the principle of data protection, through technology design and through data protection-friendly default settings.

5.5 Transmission of personal data

As part of our processing of personal data, the data may be transmitted to other bodies, companies, legally independent organizational units or persons or disclosed to them. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude corresponding contracts or agreements with the recipients of your data that serve to protect your data.

5.6 Website in general

5.6.1 Provision of the website, server log files

5.6.1.1 Scope of processing

To provide our website, we use storage space, computing capacity and software that we rent from a corresponding server provider (web host). In addition, when you visit our website, data that your browser transmits to our server is automatically processed. This general data and information is stored in the log files of the server (in so-called "server log files"). The following can be recorded:

• Browser type and browser version
• Operating system used
• Referrer URL (previously visited website)
• Host name of the accessing computer
• Date and time of the server request
• IP address

5.6.1.2 Purpose of the processing

When using this data and information, we do not draw any conclusions about your person. The purposes we pursue include in particular

• Provision of our website
• Provision of our online offer and user-friendliness
• Operation and provision of information systems
• Content Delivery Network (CDN)
• Provision of contractual services
• Customer service
• Provision of e-mail communication
• Ensuring a smooth connection to the website
• Clarification of acts of abuse or fraud,
• Problem analysis in the network
• Evaluation of system security and stability.

5.6.1.3 Legal basis

The legal basis for data processing is our legitimate interest within the meaning of Art. 6 para. 1, sentence 1 lit. f) GDPR. We have a legitimate interest in being able to provide our website in a technically flawless manner.

5.6.1.4 Recipients of personal data

Your data will be passed on to service providers for hosting and content delivery networks (CDN) to the extent necessary as part of order processing:

• Cloudflare: Content Delivery Network (CDN) Cloudflare, Inc, 101 Townsend St, San Francisco, CA 94107, USA; Privacy Policy: https://www.cloudflare.com/privacypolicy/; Use of cookies
• Shopify: Operation of the website, Shopify Inc, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, Privacy Policy: https://www.shopify.com/legal/privacy

5.6.2 Cookies

5.6.2.1 General information

We use cookies on our website.

These are text files that your browser automatically creates and that are stored on your IT system when you visit our website. Through cookies, certain information flows to the location that sets the cookie. By using cookies, it is not possible to execute programs or transfer viruses to your end device.
If you do not wish to use cookies, you can disable them in the settings.

When you visit our website or a sub-website for the first time and it contains cookies, a "cookie banner" is displayed. You can allow us to use non-essential cookies and also revoke this decision there.

From a legal perspective, a distinction must be made between necessary and non-necessary cookies.

5.6.2.2 Necessary cookies

We use necessary cookies. These are cookies that are technically necessary to provide all the functions of our website. The legal basis for data processing is our legitimate interest within the meaning of Art. 6 para. 1, sentence 1 lit. f) GDPR. We have an overriding legitimate interest in being able to offer our website in a technically flawless manner. The legal basis for the use of cookies vis-à-vis our contractual partners who make use of services contractually owed by us via our website is Art. 6 para. I lit. b) GDPR, the provision of our contractual services.

5.6.2.3 Non-essential cookies

We also use non-essential cookies (e.g. analysis and marketing cookies). These are cookies that are not technically necessary. We use them to understand your behavior on our website and to improve our offer. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR. The cookies are only set after you have given your consent via our "cookie banner".

5.6.2.4 Storage duration

A distinction is made between the following types of cookies with regard to the storage period:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their end device (e.g. browser or mobile application).
• Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved or preferred content can be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. If we do not provide users with explicit information on the type and storage duration of cookies (e.g. when obtaining consent), users should assume that cookies are permanent and that they can be stored for up to two years.

5.6.3 Our use of cookies

The following table explains which cookies we use on our website and why:

Category	Cookie	Provider	Storage duration in days
Necessary Necessary cookies are absolutely essential for the operation of our website(s) and applications. They enable, for example, the provision of the shopping cart. Without these cookies, we cannot offer the desired services. These cookies also serve security purposes. No consent is required.	AWSALBTGCORS	Amazon Web Services	7
	cart_currency	Shopify	14
	cookieconsent_status	osano	365
	__kla_id		400
	__kla_viewed		unlimited
	_checkout_queue_chec kout_token		1
	_checkout_queue_toke n		1
	amazon-pay-connected Auth		1
	apay-session-set		365
	cart		14
	cart_ver		14
	checkout		21
	chrls_debug		unlimited
	chrls_init_event		unlimited
	csync		366
	dmc-12		366
	dmc-12-r		366
	dynamic_checkout_sho wn_on_cart		1
	klaviyoOnsite		unlimited
	locale_bar_accepted		Session
	localization		366
	n4f60g07		unlimited
	pid		397
	po_visitor		po_visitor
	pushowl_landing_page _url		Session
	pushowl_landing_page _url_params		Session
	pushowl_original_url _params		unlimited
	pushowl_referrer		Session
	pushowl_session_toke n		Session
	pushowl_shopify_conf ig-1.5-1a5798d7-e339 -40db-b9dc-31a5b4fe2 ff2		Session
	pushowl_task_type		Session
	pushowl_visitor_toke n		unlimited
	reviewsIo_averageRat ing		unlimited
	reviewsIo_reviewCoun t		unlimited
	secure_customer_sig		366
	TriplePixel		unlimited
	TriplePixelU		unlimited
	tuuid		365
	__cf_bm	CloudFlare	1
	_cmp_a	Shopify CDN	1
	_landing_page		14
	_orig_referrer		14
	_s		1
	_secure_session_id		1
	_shopify_s		1
	_shopify_sa_p		1
	_shopify_sa_t		1
	_shopify_y		365
	_y		365
	cart_sig		14
	cart_ts		14
	checkout_token		366
	TestIfCookieP		397
	tf_respondent_cc	Typeform	183
	attribution_user_id		365
	__paypal_storage__	PayPal	unlimited
	enforce_policy		365
	l7_az		1
	LANG		1
	nsid		Session
	ts_c		400
	ts		400
	tsrce		3
	x-pp-s		Session
session-id-apay	Amazon Payments	365
session-id-time		365
session-id		365
session-token		365
Functional These are non-essential cookies. These cookies allow us to remember choices or changes you make with your consent	_gcl_au	Google	90
	bcookie	LinkedIn	365
	bscookie		365
	lidc		1
	UserMatchHistory		30
	VISITOR_INFO1_LIVE	YouTube	180
	YSC		Session
Analysis These are non-essential cookies. These cookies collect information about how visitors use our website. We use this information with your consent to better understand the behavior of visitors to the website.	_clck	Microsoft Clarity	365
	_clsk		1
	_cltk		Session
	ANONCHK		1
	CLID		365
	SM		Session
	_gaexp	Google Analytics	88
	_gid		1
	A3	Yahoo! Analytics	365
	IDSYNC		365
	ln_or	LinkedIn Analytics	1
Marketing These cookies enable us, with your consent, to display advertising tailored to you and content from social media.	_tt_enable_cookie	TikTok	390
	_ttp		390
	tt_appInfo		Session
	tt_pageId		Session
	tt_pixel_session_ind ex		Session
	tt_sessionId		Session
	AnalyticsSyncHistory	LinkedIn widgets	30
	li_gc		180
	8lcfmzhxc8d6_uid	The Reach Group	90
	_fbp	Facebook Pixel	90
	_rxuuid	Rhythmone Beacon	365
	am-uid	Admixer	90
	audience	SpotX	28
	c	Bidswitch	365
	C	Adform	31
	cct	AdScale	363
	CMID	Index Exchange	365
	CMPRO		90
	CMPS		90
	dc	Between Digital	365
	eng_mt	Taboola	unlimited
	IDE	DoubleClick	390
	jg2kf3qb0kis_uid	NEORY	90
	KRTBCOOKIE_466	PubMatic	90
	MR	Bing Ads	7
	mt_misc	MediaMath	30
	MUID	Bing Ads	390
	PugT	PubMatic	30
	SRM_B	Adform	390
	ss	Between Digital	365
	test_cookie	DoubleClick	1
	tu	AdScale	363
	tuuid_lu	Bidswitch	365
	u8x7eovwf3h6_uid	NEORY	90
	uid	Adform	60
	uids	MedyaNet	90
	to	Improve Digital	90
	umeh		90
	UserID1	Adition	90
	ut	Between Digita	365
	uu	AdScale	363
	uuid	MediaMath	393
	uuid2	AppNexus	90
	v930q3phzhqx_uid	NEORY	90
	viewer_token	LoopMe	92

 

5.6.4 Cookie banner

5.6.4.1 Scope of processing

Our cookie banner informs you about the specific cookies we use. In addition, we give you the opportunity to decide whether you want to consent to the setting of non-essential cookies. Can be processed:

• Usage data (e.g. websites visited, time of access)
• Meta and communication data (e.g. IP address)

5.6.4.2 Purpose of the processing

We process your personal data for the following purposes:

• Informing the user about the cookies we use
• Enabling you to consent to cookies that are not technically necessary

5.6.4.3 Legal basis of the processing

The legal basis for the use of the cookie banner is Art. 6 para. 1, sentence 1 lit. f) GDPR. We have an overriding legitimate interest in using the cookie banner, which enables us to obtain the legally required consent for the use of non-essential cookies and to comply with our duty to provide information regarding cookies.

5.6.4.4 Storage duration

The cookie banner stores the preferences until you reset or customize them.

5.6.4.5 Recipients of personal data

Your data will be passed on to a service provider for cookie banners to the extent necessary as part of order processing:

• Osano: Consent-Tool, Osano Inc, 3800 N Lamar Blvd, Ste 200, Austin, TX 78756, Privacy Policy: https://www.osano.com/legal/privacy

5.7 Contact options

5.7.1 Scope of processing

You have the option of contacting us via e-mail or a contact form on our website.

We process the following personal data from you as part of contacting you and responding to your request:

• First and last name
• E-mail address
• Phone number
• Address data
• Date and time of the request
• IP address
• Order number
• Communication content

5.7.2 Purpose of the processing

We process your data to answer your request and other resulting matters.

5.7.3 Legal basis

If your request is related to pre-contractual measures or an existing contract with us, the legal basis is the fulfillment of the contract and the implementation of pre-contractual measures pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR.

If your request is made independently of pre-contractual measures or existing contracts with us, our overriding legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR constitute the legal basis. We have an overriding legitimate interest in offering visitors to our website an opportunity to contact us.

5.7.4 Storage duration

We delete your personal data as soon as it is no longer required to achieve the purpose for which it was collected. In the case of contact inquiries, this is generally the case when it is clear from the circumstances that the specific matter in question has been conclusively dealt with.

5.7.5 Recipients of personal data

Your data will be passed on to a service provider to the extent necessary as part of order processing:

• Klaviyo: Mail dispatch, 225 Franklin St, Boston, MA 02110, USA, privacy policy: https://www.klaviyo.com/legal/privacy/privacy-notice
• United Domains: Mailserver, United Domains AG Gautinger Straße 10 82319 Starnberg; Privacy Policy: https://www.uniteddomains.de/unternehmen/datenschutz/
• Typeform: Contact form, Bac de Roda 163, Barcelona, Spain, Privacy policy: https://admin.typeform.com/to/dwk6gt
  
  

5.8 Webshop

5.8.1 Scope of processing

You have the option of ordering our products via our website. In order to carry out this process, we process your personal data. In particular, we process the following personal data:

• First and last name
• E-mail address
• Phone number
• Address
• Means of payment
• Billing address
• Communication content

5.8.2 Purpose of the processing

We process your data to process your order.

5.8.3 Legal basis

If your request is in connection with pre-contractual measures or an existing contract with us, the associated data processing operations are based on Art. 6 para. 1, sentence 1 lit. b) GDPR.

5.8.1 Recipients of personal data

Your data will be passed on to service providers to the extent necessary for the execution of the product order or activation as part of order processing:

• Shopify: Operation of the online store, Shopify Inc, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada, Privacy Policy: https://www.shopify.com/legal/privacy
• Pushowl: Sending of web-based push notifications, Creatorbox Softwares Private Limited, No 39, 2nd Floor NGEF Lane, Suite no 909 Indiranagar First Stage Bangalore KA 560038 IN; Privacy Policy: https://pushowl.com/privacy
• AreViewsApp: customer reviews, Areviews Ltd, privacy policy: https://areviewsapp.com/privacy_policy
• Silyoapps: Goodies; Privacy policy: https://www.stilyoapps.info/privacy-policy
• Conversion bearer: Upsell App, AppHub LLC, 116 Huntington Ave, 15th Floor, Boston Massachusetts 02116 USA; Privacy Policy: https://www.apphub.com/privacy-policy
• Billbee Gesellschaft mit beschränkter Haftung, Auftragsabwicklung, Arolser Str. 10, 34477 Twistetal, Germany; Data protection: https://www.billbee.io/rechtliches/datenschutz
• SCA Logistik &Fullfillment GmbH: Warehousing, Logistics, Packing, Benzstraße 4 85084 Reichertshofen; Data protection: https://www.sca-muc.de/datenschutz/

 

5.9 Customer account

5.9.1 Scope of processing

You have the option of creating a customer account during the ordering process:

• First and last name
• E-mail address

5.9.2 Purpose of the processing

We process the data for the purpose of opening a customer account and to store your data for future orders on our website.

5.9.3 Legal basis

The legal basis for the creation of the customer account is your voluntary consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.

5.10 Payment in the webshop

5.10.1 Scope of processing

In our webshop you have the option of paying in different ways. In order to carry out this process, we process your personal data. In particular, we process the following personal data:

• Means of payment
• Billing address

5.10.2 Purpose of the processing

We process your data to process your order.

5.10.3 Legal basis

If your request is in connection with pre-contractual measures or an existing contract with us, the associated data processing operations are based on Art. 6 para. 1, sentence 1 lit. b) GDPR.

5.10.4 Recipients of personal data

Your data will be passed on to service providers to the extent necessary to process the payment as part of order processing:

• PayPal (Europe) S.à r.l. et Cie, S.C.A, 22-24 Boulevard Royal, L-2449 Luxembourg
• Klarna AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden
• Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg
• Apple Distribution International, Hollyhill Industrial Estate, Hollyhill Cork, Ireland
• Shopify Payments, 126 York Street, Suite 200, Ottawa, ON, Canada, K1N 5T5
• Google Pay (Europe), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

5.11 Newsletter

5.11.1 Scope of processing

If you would like to receive information about our new products and services, we can inform you via newsletter if you consent to receiving newsletters.

You can revoke your consent to receive our newsletter at any time by clicking on the unsubscribe link in emails or by sending an email to support@valkental.de or by post to the contact details given in the legal notice. Your personal data will then be removed from the mailing list.

Our newsletters contain so-called tracking links, which enable us to analyze the behavior of newsletter recipients. For example, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked on. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected through the tracking links is stored and evaluated by us in order to optimize the newsletter dispatch and to adapt the content of future newsletters even better to your interests.

We process the following personal data, among others, as part of sending the newsletter:

• E-mail address
• First and last name
• Organization
• Preferred language
• Metadata (e.g. device information, IP address, date and time of login)
• Interaction with the newsletter

5.11.2 Purpose of the processing

We process your personal data for the following purposes:

• Newsletter distribution: implementation of marketing measures
• Newsletter tracking: Measuring success

5.11.3 Legal basis

The legal basis for sending our newsletter is your consent in accordance with Art. 6 para. 1 lit. a. You can withdraw your consent at any time with effect for the future. The legal basis for newsletter tracking is our legitimate interest in finding out whether our newsletter meets your interests and expectations in accordance with Art. 6 para. 1 lit. f GDPR.

5.11.4 Recipients of personal data

Your data will be passed on to a service provider for newsletter dispatch to the extent necessary as part of order processing:

• Klaviyo: Mail dispatch, 225 Franklin St, Boston, MA 02110, USA, privacy policy: https://www.klaviyo.com/legal/privacy/privacy-notice
• United Domains: Mailserver, United Domains AG Gautinger Straße 10 82319 Starnberg; Privacy Policy: https://www.united-domains.de/unternehmen/datenschutz/
  
  

5.12 Customer relationship management system

5.12.1 Scope and purpose of processing

We use functions of a customer relationship management system ("CRM system") on this website. Among other things, the CRM system enables us to manage existing and potential customers and customer contacts and to organize sales and communication processes. The use of the CRM system also enables us to analyze and optimize our customer-related processes. Details on the functions of the CRM system we use can be found here:

 This enables us to process the following data, among others:

• E-mail address
• First and last name
• Address
• IP address
• Phone number

5.12.2 Legal basis

The CRM is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the most efficient customer management and customer communication possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time via our cookie banner.

5.12.3 Recipients of personal data

Your data will be passed on to a service provider for CRM systems to the extent necessary as part of order processing:

• Zendesk: Zendesk Inc., 1019 Market Street San Francisco, CA 94103; Privacy Policy: https://www.zendesk.de/company/agreements-and-terms/privacy-notice/

5.13 Google Tag Manager

5.13.1 Scope and purpose of processing

We use Google Tag Manager to control the use of code snippets ("tags"), such as tracking code on our website. Google Tag Manager enables us to quickly and easily exchange code on our website via a web interface without having to intervene in the source code.

Among other things, we process the following personal data through the Google Tag Manager:

• IP address
• Device data, such as operating system, browser version, screen resolution

5.13.2 Legal basis

The legal basis for the use of Google Tag Manager is your voluntary and revocable consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

5.13.3 Storage duration

Personal data is anonymized by Google after 9 months, unless there is a legal obligation to retain it.

5.13.4 Recipients of personal data

Your data will be passed on to Google Ireland Ltd. to the extent necessary as part of order processing.

5.14 Web analysis

5.14.1 Scope and purpose of processing

This website uses functions with the help of which we analyze your user behavior in order to make decisions regarding product and marketing optimization based on the results. Among other things, the following personal data is processed:

• Time of the request
• IP addresses
• Online labeling
• Device identifiers
• Technical characteristics of users (e.g. browser type and version, device type, operating system)
• Measurement of user behavior (e.g. views of individual pages / content, views of content from different areas, session duration / dwell time, bounce rate)
• Use of individual functionalities of the website (e.g. search queries, downloads)
• eCommerce activity (e.g. products purchased, sales)
• Referral URL (the previously visited page)

5.14.2 Legal basis

The legal basis for the use of web analytics services is the voluntary and revocable consent given by you in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

5.14.3 Storage duration

Personal data will be anonymized by Google, among others, 14 months after your last activity, unless there are legal obligations to retain it.

5.14.4 Recipients of personal data

Your data will be passed on to the following providers to the extent necessary as part of order processing:

• Google Analytics: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
• Clarity: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; Privacy Policy: https://docs.microsoft.com/en-us/clarity/faq
• LinkedIn Analytics: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland Privacy Policy: https://www.linkedin.com/legal/privacy-policy
• Lucky Orange: Lucky Orange LLC, 8680 w. 96th Street, Suite 200, Overland Park, KS 66212, USA ; Privacy Policy: https://www.luckyorange.com/legal/privacy
• Triple Whale: Triple Whale Inc.,7th Floor, Jaffa St 224, Jerusalem, Israel; Privacy Policy: https://www.triplewhale.com/pages/privacy-notice

 

5.15 Advertising services

5.15.1 Scope of processing

Advertising services are used to address visitors to the online presence. Target groups can be created that have, for example, accessed certain pages. This makes it possible to identify the user on other online presences and display targeted advertising. Cookies are placed on the user's computer for this purpose. This allows personal data to be stored and analyzed, in particular

• the user's activity (in particular which pages have been visited and which elements have been clicked on),
• Device and browser information (in particular the IP address and the operating system),
• data about the advertisements displayed (in particular which advertisements were displayed and whether the user clicked on them) and
• also data from advertising partners (in particular pseudonymized user IDs).

5.15.2 Purpose of the processing

Advertising services are used to address specific target groups in order to show them advertising that matches their interests when they visit the website

5.15.3 Legal basis

The legal basis for the use of advertising services is the voluntary and revocable consent given by you in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

5.15.4 Storage duration

Personal data will be anonymized by Google, among others, 14 months after your last activity, unless there are legal obligations to retain it.

5.15.5 Recipients of personal data

Your data will be passed on to the following providers to the extent necessary as part of order processing.

• Google AdServices: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
• Google Double Click: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/
• Adcell: Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin; Privacy Policy: https://www.adcell.de/datenschutz
• Bing Ads: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
• Taboola: Taboola, Inc.16 Madison Square West, 7th fl., New York, NY, 10010, Privacy Policy: https://www.taboola.com/policies/privacy-policy

 

 

5.16 Facebook pixel - shared responsibility with Facebook

5.16.1 General information

We use the so-called "Facebook pixel" from Meta Platforms Ireland Limited ("Meta") - formerly Facebook Ireland Limited - on our websites under joint responsibility.

When you access our website via your browser, the Facebook pixel built into it initiates cookie storage in your system if you have given your consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the corresponding changes or adjustments in your cookie settings.

The controllers within the meaning of Art. 26 GDPR are

• Meta Platforms, Ireland Ltd, 4 Grand Canal Square, Dublin 2 Ireland
• Valkental GmbH, Rheinpromenade 9, 40789 Monheim am Rhein, Germany

5.16.2 Agreement on joint responsibility

The agreement on joint responsibility pursuant to Art. 26 para. 1 sentence 2 GDPR is available at: https://www.facebook.com/legal/controller_addendum

5.16.3 Data processing by Meta

All information collected by the cookie is forwarded to Meta and allows Meta to draw conclusions about your user behavior. If you are registered on a Meta platform/service, Meta can assign this visit to you. Even if you are not registered on a Meta platform/service or are not logged in, there is a possibility that Meta will receive your IP address and other identifying features and store them in an assignable manner.

Further information regarding the data processing for which Meta is responsible can be found, for example, in the following sources of information:

• Meta Terms of Use: https://www.facebook.com/legal/terms/update
• Data policy: https://de-de.facebook.com/privacy/explanation

5.17 Social media presence

5.17.1 General information

We use third-party platforms to provide you with information about our company and our products and services. This involves processing interactions such as messages, likes and content on our social media channels.

In addition, we receive non-personal data from third-party platforms, such as the total number of actions played by the platform operator or preferred visiting and posting times. We have no influence on the creation and provision of this data. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in improving our marketing measures.

The associated personal data processing takes place exclusively within the area of responsibility of the platform operators. Further information on data processing can be found in the privacy policies of the respective providers:

• Instagram:https://de-de.facebook.com/help/instagram/519522125107875
• Facebook: https://www.facebook.com/privacy/policy/
• YouTube:https://policies.google.com/privacy
• LinkedIn:https://www.linkedin.com/legal/privacy-policy?_l=de_DE
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en

5.18 Integration of third-party services and content

5.18.1 General information

We use content or service offers from third-party providers within our online offer in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visit time and other information about the use of our online offer, as well as being linked to such information from other sources.

5.18.2 GoogleFonts
Integration of fonts: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.3 Google Photos
Integration of photos: Google Photos, Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.4 Google Videos
Integration of videos: Google Videos, Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.5 Google Maps
Integration of maps: Google Maps, Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.google.com/intl/de/policies/privacy/

5.18.6 Review widget
Customer reviews on Google: Google Ireland Limited, Google Building Gordon House, Barrow St 4, Dublin, Ireland, Privacy Policy: https://www.review-widget.net/privacy.html

5.18.7 Weglot
Language settings: Weglot SAS, 138, rue Pierre Joigneaux in Bois-Colombes 92270 France, Privacy Policy: https://weglot.com/privacy/

6 Your rights

In this section, we inform you about the rights you have in relation to the processing of your data. The exact scope of the right mentioned in each case can be found in the corresponding article of the GDPR. If you wish to exercise any of your rights, please contact us by email (support@valkental.de).

6.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed by us.

6.2 Information (Art. 15 GDPR)

You have the right to receive free information from us at any time about the personal data stored about you and a copy of this data in accordance with the statutory provisions.

6.3 Rectification (Art. 16 GDPR) 

You have the right to request the rectification of inaccurate personal data concerning you. You also have the right to request the completion of incomplete personal data, taking into account the purposes of the processing.

6.4 Erasure (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the grounds provided for by law applies and insofar as the processing or storage is not necessary.

6.5 Restriction of processing (Art. 18 GDPR) 

You have the right to demand that we restrict processing if one of the legal requirements is met.

6.6 Data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent pursuant to Art. 6 para. 1, sentence 1 lit. a) GDPR or Art. 9 para. 2 lit. a) GDPR or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In exercising your right to data portability pursuant to Art. 20 (1) GDPR, you also have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

6.7 Objection (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on data processing in the public interest pursuant to Art. 6 para. 1 sentence 1 lit. e) GDPR or on the basis of our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

6.8 Revocation of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

6.9 Complaint to a supervisory authority

You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.

7 Up-to-dateness and changes to the data protection information

This privacy policy is currently valid and has the following status: March 2023.

If we further develop our website and our offers or if legal or official requirements change, it may be necessary to amend this data protection notice. You can access the current data protection information at any time here.

Use of the SalesViewer® technology:

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes on the basis of the website operator's legitimate interests (Art. 6 (1) (f) GDPR).

For this purpose, a javascript-based code is used to collect company-related data and the corresponding use. The data collected using this technology is encrypted using a non-reversible one-way function (known as hashing). The data is immediately pseudonymized and is not used to personally identify the visitor to this website.

The data stored by Salesviewer is deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent the collection of data by SalesViewer® within this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click on this link again.