Data protection

2. Collecting and storing personal data, as well as type and purpose of the use of the data

a) When visiting the website

During your visit to our website, the browser used on your device automatically sends information to the server of our website. These data are temporarily stored in a so-called log file. The following information is collected without any action on your part, and stored until they are automatically deleted:

• IP address of the computer making the inquiry
• date and time of the access,
•  name and URL of the retrieved file;
• website from which access is made (Referrer-URL),
• browser used and possibly the operating system of your computer, as well as the name of your access provider.

The above-mentioned data are processed by us for the following purposes:

• to ensure that a trouble-free connection is established to our website,
• to ensure a user-friendly operation of our website,
• to assess the security and stability of the system as well as
• for other administrative purposes.

The legal basis for the data processing is Article 6 paragraph 1 sentence 1 lit. (f) of the GDPR. Our legitimate interest arises from above mentioned purposes for the collection of data. On no account do we use the collected data for purposes of drawing conclusions about your person.

Furthermore, cookies and analytics services are used during your visit on our website. For detailed information on this matter, please refer to sections 4 and 5 of this privacy policy.

b) Registering to receive our newsletter

If you have given us your express authorisation according to Article 6 paragraph 1 sentence 1 lit. (a) of the GDPR, we will use your email address to send you our newsletter on a regular basis. To receive our newsletters, entering your email address will be sufficient.

You have the option to unsubscribe at any time, for example, by clicking on the link at the end of each newsletter. Alternatively, you may also express your wish to unsubscribe at any time in an email to info@cabinet.de.

c) When using the contact form

For any further questions, you have the option to contact us using the contact form provided on our website. This requires, however, the submission of your name and valid email address to allow us to identify who sent us the email and to respond accordingly. All additional information may be submitted on a voluntary basis.

Data processing for the purpose of establishing contact with us is carried out in accordance with Article 6 paragraph 1 sentence 1 lit. (a) of the GDPR and is based on your prior consent given voluntarily.

The personal data collected by us for the use of our contact form will be deleted after 90 days at the latest upon completion of the processing of your request.

d) Ordering a catalogue

You have the option to receive our up-to-date catalogues free of charge.  For this purpose, you can complete an order form provided on our website.

This requires, however, the submission of your name, your address and a valid email address to allow us to identify who sent us the request, and to mail the catalogue accordingly. All additional information is submitted on a voluntary basis.

Data processing of your personal data for the purpose of ordering the catalogue with us is also carried out in accordance with Article 6 paragraph 1 sentence 1 lit. (a) of the GDPR and is based on your prior consent given voluntarily.

The personal data collected by us for ordering the catalogue will be deleted after 90 days at the latest upon shipment of the catalogue.

3. Disclosure of data

Disclosure of your personal data to third parties and for other purposes than can be found below does not take place.

Your personal data will be disclosed to third parties only, if:

• you have given your express prior consent in accordance to Article 6 paragraph 1 sentence 1 lit. (a) of the GDPR,
• if the disclosure is required for the establishment, exercise or defence of legal claims in accordance with Article 6 paragraph 1 sentence 1 lit. (f) of the GDPR, while there is no reason to believe that your legitimate interests in preventing the disclosure of your data take precedence,
•  in case there is a legal obligation to disclose the data in accordance with Article 6 paragraph 1 sentence 1 lit. (c) of the GDPR, as well as
• insofar as this is permitted by law and required for the settlement of the terms and conditions of the contract in accordance with Article 6 paragraph 1 sentence 1 lit. (b) of the GDPR.

4. Cookies

Cookies are used on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not damage your device and do not contain any viruses, Trojans or other malware. 

The cookie contains information generated in connection with the device used in each specific case. However, this does not mean that we obtain direct knowledge as to your identity as a result.

On the one hand, the application of cookies serves to make the use of our website more user-friendly.  Therefore, we use so-called session cookies to identify whether you have already visited individual pages of our website.  These are automatically deleted after you leave our website.

In addition, with the aim of making our website more user-friendly, we also use temporary cookies that are stored on your device for a specified period of time.  When you revisit our website to access our services, it automatically recognises that you have already visited our pages and remembers the information and settings you entered so that you do not have to enter them again.

On the other hand, we also use cookies to generate a statistical analysis regarding the use of our website with a view to optimising our pages for you (see Section 5).  If you revisit our website, these cookies allow us to automatically identify that you have already visited our website before.  These cookies are automatically deleted after a respectively set period of time.

The data processed through the use of cookies are required for the purposes stated to safeguard the legitimate interests or us or of third parties in accordance with Article 6 paragraph 1 sentence 1 lit. (f) of the GDPR.

Most browsers automatically accept cookies.  However, you can configure your browser in such a way that no cookies are saved on your computer, or that a warning appears before a new cookie is created.  If you completely deactivate cookies, you may not be able to use all the functions of our website.

5. Analytical tools

a) Tracking-Tools

Our use of the tracking tools listed below is based on Article 6 paragraph 1 sentence 1 lit. (f) of the GDPR.  In using these tracking tools, we aim to align the design of our website with user needs while continuously optimising our pages. On the other hand, we also use tracking tools to generate a statistical analysis regarding the use of our website with a view to optimising our pages for you.  These interests are to be considered legitimate within the meaning of the aforementioned provisions.

The respective purposes of processing the data, as well as the data categories, can be taken from the respective tracking tools.

b) Google Analytics

To align the design of our website with user needs while continuously optimising our pages, we use Google Analytics, a web analysing service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, US; hereinafter referred to as “Google“). In this context, pseudonymous profiles are created and cookies are used (see Section 4).  The information the cookie generates concerning your use of the website, such as

• browser type/version,
• operating system used,
• referrer-URL (previously visited web page),
• host name of the accessing computer (IP address),
• time of server request,

is generally transmitted to a Google server in the US and stored there. This information is used to analyse website usage, to compile reports on website activities, and to perform other services associated with website and internet usage for the purposes of market research and aligning the design of these web pages with user needs.  This information may also be transferred to third parties where a legal obligation to do so exists, or where third parties are commissioned to process these data. Under no circumstances is your IP combined with other Google data.  IP addresses are anonymised, ensuring that they cannot be allocated to users (IP masking). You can adjust your browser software to prevent the installation of cookies; please note, however, that disabling cookies may mean that you cannot use all the functions of this website to the full extent.

Furthermore, you can also prevent the collection of data related to your website usage (including your IP address) which is generated by the cookie, as well as the processing thereof by Google, by downloading and installing a browser add-on (https:// tools.google.com/dlpage/gaoptout?hl=de).

As an alternative to installing the browser add-on, and especially for browsers on mobile devices, you can also prevent Google Analytics from collecting the data by clicking on this link.  An opt-out cookie will be set which will prevent your data from being collected during future visits to this website. The opt-out cookie only applies to this browser and only to our website and is stored on your device.  If you delete the cookies in this browser, you will have to set the opt-out cookie again.

For further information regarding data protection in connection with Google Analytics, please refer to Google Analytics Help:

support.google.com/analytics/

6. Social Media Plug-ins

On our website we use social plug-ins of the social networks Facebook, Twitter and Instagram in accordance to Article 6 paragraph 1 sentence 1 lit. (f) of the GDPR with a view to promoting public awareness of our website. The underlying promotional purpose is considered a legitimate interest within the meaning of the GDPR. Responsibility for any operation compliant with data protection has to be guaranteed by the respective providers. The integration of these plug-ins by us is carried out by way of the so-called two-click method, to optimally protect visitors to our website.

a)  Facebook

Social media plugins of Facebook are embedded in our website to ensure it can be used in a more personalised way. For this purpose, we use "LIKE" or "SHARE" buttons.  This is a service offered by Facebook.

If you visit a page on our website that contains one of these plugins, your browser establishes a direct connection with Facebook’s servers.  The content of the plugin is directly transmitted from Facebook to your browser and embedded in the website.

Through the integration of plugins, Facebook is informed that your browser has accessed the relevant page of our website, even if you do not have a Facebook account or are not logged into Facebook.  This information (including your IP address) is directly transmitted to a Facebook server in the United States where it is stored.

If you are logged into Facebook, your accessing our website can be directly traced back to your Facebook account by Facebook. If you interact with the plugins, for example by using the “LIKE” or “SHARE” buttons, this information is also directly transmitted to a Facebook server where it is stored.  The information will also be published on Facebook and displayed to your Facebook friends.

Facebook can use this information for the purposes of advertising, market research and the needs-based design of Facebook pages. To this end, Facebook creates profiles concerning usage, interests and relationships, for example to evaluate your use of our website with respect to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide additional services related to the use of Facebook.

If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website.

Please read Facebook’s Data Policy to learn about the purpose and extent of data collection, the further processing and use of the data by Facebook, as well as your rights and settings options for protecting your privacy:

www.facebook.com/about/privacy/

b)  Twitter

Plugins of the short message service network Twitter Inc. (Twitter) are embedded in our website. You can identify the Twitter plugins (Tweet button) via the Twitter logo on our website. The following links provide an overview of Tweet buttons: help.twitter.com/de and about.twitter.com/de.html

If you access a page on our website that contains one of these plugins, a direct connection is established between your browser and the Twitter server.  Twitter then receives information including the IP address which have visited our website. If you click on the Twitter “Tweet button” while logged into your Twitter account, you can create a link to the content of our website on your Twitter profile. Twitter is thus able to trace your accessing our site back to your user account.  Please note that as the provider of the website, we do not receive any knowledge of the content of the transmitted data or its usage by Twitter.

If you do not want Twitter to trace your visit to our website, make sure to log out of your Twitter account.

For further information please refer to Twitter’s Privacy Policy at twitter.com/privacy

c)  Instagram

Instagram social plugins (“plugins”) operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, US (“Instagram”) are also used on our website.

The plugins are denoted by an Instagram logo, for example in the form of an Instagram camera.

If you visit a page on our website that contains one of these plugins, your browser establishes a direct connection with Instagram’s servers.  The content of the plugin is directly transmitted from Instagram to your browser and embedded in the website. Through the integration of plugins, Instagram is informed that your browser has accessed the relevant page of our website, even if you do not have an Instagram account or are not logged into Instagram.

This information (including your IP address) is directly transmitted by your browser to an Instagram server in the United States where it is stored. If you are logged into Instagram, your accessing our website can be directly traced back to your Instagram account by Instagram. If you interact with the plugins, for example by using the “Instagram” button, this information is also directly transmitted to an Instagram server where it is stored.

The information will also be published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website.

For further information please refer to Instagram’s Privacy Policy at help.instagram.com/155833707900388

7. Rights of the data subject

You have the right:

• to obtain information about your personal data that we process in accordance with Article 15 of the GDPR. In particular, you have the right to obtain information regarding the purposes of the processing; the category of personal data concerned; the categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the data will be stored; the existence of the right to request rectification or erasure, the restriction of processing, or to object to such processing; the existence of the right to lodge a complaint; the source of your data in cases when the personal data are not collected by us; the existence of automated decision-making, including profiling, and where applicable, meaningful information about the specific details;
• to obtain without undue delay the rectification of inaccurate personal data concerning you that we have stored, as well as the right to have the personal data completed, in accordance with Article 16 of the GDPR;
• to obtain the erasure of the personal data concerning you that we have stored, in accordance with Article 17 of the GDPR, provided the processing thereof is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
• to obtain a restriction of the processing of your personal data where the accuracy of the data is contested by you, the processing thereof is unlawful but you oppose the erase thereof, or we no longer need the personal data but they are required by you for the establishment, exercise or defence of legal claims in accordance with Article 18 of the GDPR, or where you have objected to the disclosure of this data pursuant to Article 21 of the GDPR;
• to obtain the personal data concerning you that you have provided us in a structured, commonly used and machine-readable format, or to have this data transmitted to another controller (data portability), in accordance with Article 20 of the GDPR;
• to withdraw the consent you gave to us at any time, in accordance with Article 7 paragraph 3 of the GDPR.  This means that we may no longer process data for which this consent was granted; and
• lodge a complaint with a supervisory authority, in accordance with Article 77 of the GDPR. In most cases, you can contact a supervisory authority in the location of your habitual residence, place of work or our company headquarters.

8. Right to object

Provided that your personal data are processed based on legitimate interests in accordance with Article 6 paragraph 1 lit. (f) of the GDPR, you will be entitled, according to Article 21 of the GDPR, to object to the processing of your personal data on grounds relating to your particular situation, or if the objection is directed against direct marketing purposes. In the latter case, you have a general right to object which will be implemented by us without the requirement of a reference to a particular situation.

If you would like to make use of your general right to object, a notification by email to info@cabinet.de is sufficient.

9. Data security

We implement the widely used SSL (Secure Socket Layer) technology for website visits in combination with the respectively highest encryption level supported by your browser. In general, a 256 bit encryption is used. If your browser does not support a 256 bit encryption, we will implement the 128 bit v3 technology instead. Whether an individual page of our website is transmitted encrypted is indicated by the symbol of a closed key or padlock icon in the bottom status bar of your browser.

Beyond this, we utilize suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction and unauthorised access by third parties.  Our security measures are continually enhanced as new technology becomes available.

Data processing duration

We will process and store your personal information for as long as necessary to fulfil our contractual and legal obligations.  Data that are no longer required for this purpose will be deleted on a regular basis, unless further processing (storage) is required by law. The statutory provisions include commercial and tax-related retention periods from the German Commercial Code (HGB), the German Tax Code (AO), the Money Laundering Act (if applicable) and social security regulations.  The deadlines for storage and documentation defined there are two up to ten years.

10. Validity of and amendments to the Privacy Policy

This Privacy Policy is valid in its current version and was last updated in May 2018. This Privacy Policy may require amendment due to the further development of our website and its pages, or as a result of a change in legal or official regulations.