Privacy policy DSGVO

Privacy policy

Status: May 2022

This data protection declaration informs you about the nature, scope and purpose of the processing of your personal data (hereinafter referred to as “data”) by us and your rights in this regard.

1. Who is responsible for data processing and whom can I contact?

 Responsible in the sense of the General Data Protection Regulation is:

Active club Zala24
Baratsziget 321/5 hrsz.
8784 Kehidakustany HU

Phone: +36 30 667 63 68 or +36 30 459 72 82
E-mail: info@zala24.com

If you wish to object to the collection, processing or use of your data in accordance with the provisions of data protection law, either in whole or in respect of individual measures, please send your objection to the above address or by e-mail to the above e-mail address.

2. On what legal basis do we process your data

First of all, in accordance with Art. 13 DSGVO, we inform you in the following about the legal basis of our data processing. If the legal basis is not explicitly stated in this privacy policy, the following applies: If you have given your consent to the processing of your personal data, the legal basis is Art. 6 para. 1 lit. a and Art. 7 DSGVO, if the processing is carried out for the fulfillment of our services and implementation of contractual measures as well as answering inquiries, the legal basis is Art. 6 para. 1 lit. b DSGVO, if the processing is carried out to fulfill our legal obligations, the legal basis is Art. 6 para. 1 lit. c DSGVO and if the processing is carried out to protect our legitimate interests, the legal basis is Art. 6 para. 1 lit. f GDPR. If a processing of personal data is necessary to protect vital interests of the data subject or another natural person, Art. 6 para. 1 lit. d DSGVO as the legal basis.

 If processing is based on your consent, you can revoke this at any time with effect for the future. You can send your revocation by mail to the above address or by e-mail to the above e-mail address.

 In the event that we disclose data to other persons and companies (processors or third parties) within the scope of our processing, transfer data to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transfer of data to third parties, such as to payment service providers, is necessary for the performance of the contract pursuant to Art. 6 para. 1 lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc. pursuant to, Art 6 para. 1 lit. C DSGVO).

In the event that we commission third parties with the processing of data, this is done on the basis of Art. 28 DSGVO. (so-called “order processing”).

3. What data are processed

 Cookies

We use cookies on our website. This is done in order to be able to allocate requests and requirements of the interested party. Cookies are small text files that are stored on your computer system. The use of cookies enables us to measure the frequency of page views and general navigation. We would like to point out that some of these cookies are transferred from our server to your computer system, whereby these are mostly so-called “session cookies”. “Session cookies” are characterized by the fact that they are automatically deleted from your hard drive at the end of the browser session. Other cookies remain on your computer system and enable us to recognize your computer system on your next visit (so-called permanent cookies). If your browser allows it, you can refuse cookies at any time. Please note that certain functions of this website may not be available or may be restricted if your browser is set not to accept cookies (from our website).

Hosting

The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services, which we use for the purpose of operating this online offering. For these purposes, we, or our hosting provider, process your data on the basis of our legitimate interests in an efficient and secure provision of this online offer in accordance with the German Data Protection Act. Art. 6 par. 1 lit. f DSGVO in conjunction with. Art. 28 DSGVO (conclusion of order processing contract).

Collection of access data and log files

We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. DSGVO data about each access to the server on which this service is located (so-called server log files). The access data includes the date and time of access, the name of the website accessed, the amount of data transferred, the message about successful access, the browser type and version, the user’s operating system, the previously visited page (so-called “referrer URL”), the IP address and the requesting provider. Log file information is stored for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.

 

Contact 

When contacting us (e.g. by contact form, e-mail, telephone or via social media), the user’s details will be used to process the contact request and its handling in accordance with the German Data Protection Act. Art. 6 par. 1 lit. b) DSGVO processed in connection with the consent you have given. The deletion of the data takes place after the processing of your request has been completed.

We do not share this data without your consent. You can revoke this consent at any time without giving reasons. For this purpose, an informal message by e-mail to us is sufficient. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation.

.

Comment function

If you use the options offered on our site to leave comments on the individual posts, your IP address will be stored on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. DSGVO are stored for 7 days. This storage takes place for our security in the event that the author’s comments infringe upon the rights of third parties and/or illegal content is posted. In this case, we ourselves may be prosecuted for the comment or post and are therefore interested in the identity of the author. Thus, there is a legitimate self-interest on our part in the stored data of the author, especially since we can be prosecuted under certain circumstances for such violations. The data will not be passed on to third parties.

Furthermore, we reserve the right, on the basis of our legitimate interests pursuant to sec. Art. 6 par. 1 lit. f. DSGVO, the information of the users for the purpose of spam detection.
to process.

Newsletter

If you consent to receive our newsletter via our website, we will collect and use your name and e-mail address, as well as any other data you may have voluntarily provided, to send you a newsletter. Consent can be revoked at any time. You can unsubscribe from the newsletter at any time free of charge via the link provided in the newsletter. The aforementioned data is collected, processed and used exclusively for sending the newsletter. The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. This data processing is based on Art. 6 para. 1 lit. a) DSGVO in connection with the consent you have given.

The registration for our newsletter takes place in a so-called double opt-in process. I.e. after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with foreign e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the subscription process in accordance with legal requirements. This includes the storage of the login and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged. The logging of the registration process takes place on the basis of our legitimate interests in accordance with. Art. 6 par. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests, meets the expectations of users and allows us to prove consent.

Click-Tip

This website uses the Klick-Tipp service for sending newsletters. The provider of this service is KLICK-TIPP LIMITED, 15 Cambridge Court, 210 Shepherd’s Bush Road, London W6 7NJ, United Kingdom.

Klick-Tipp is a service that can be used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of receiving the newsletter will be stored on Klick-Tipp’s servers. When we send newsletters using Klick-Tipp, we can determine whether a newsletter message has been opened and which links, if any, have been clicked. Klick-Tipp also allows us to subdivide newsletter recipients based on different categories (so-called tagging). In doing so, newsletter recipients can be subdivided according to gender, personal preferences (e.g. vegetarian or non-vegetarian) or customer relationship (e.g. customer or potential customer), for example. In this way, newsletters can be better adapted to the respective target groups. 

For more information, visit: https://www.klick-tipp.com and https://www.klick-tipp.com/handbuch.

If you do not want any analysis by Klick-Tipp, you must therefore unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. Furthermore, you can also unsubscribe from the newsletter directly on the website.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Klick-Tipp after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the member area) remain unaffected by this.

For more details, please refer to Klick-Tipp’s privacy policy at: https://www.klick-tipp.com/datenschutzerklaerung.

 We have concluded a contract with Klick-Tipp on the procedure for commissioned data processing. This ensures that our service provider adheres to the strict requirements of European data protection law in all respects when sending the newsletter. This also ensures that your data is only stored within the EU with a high level of protection. Your data will not be stored on servers outside the EU.

The above-mentioned shipping service provider is used on the basis of our legitimate interests in accordance with. Art. 6 par. 1 lit. f DSGVO and a contract processing agreement pursuant to. Art. 28 par. 3 p. 1 DSGVO used

Your customer account in target24 store

When you create a customer account with us, we store your personal data in our customer database. With your email address and a self-selected password you can log in again on your next visit and do not have to re-enter your data when ordering. Your password is stored encrypted and cannot be read even by us. You can cancel the customer account at any time. All data that is not subject to a retention period will be irrevocably deleted when the customer account is closed.

4. How secure is my data

All data that you provide to us is encrypted and transmitted using the SSL (Secure Socket Layer) method for security reasons. SSL is a proven and worldwide used encryption system, with the help of which your browser automatically encrypts your data before sending it to us. You can recognize an encrypted connection by the fact that the browser address bar changes from “https://” to “https://” and by the lock symbol in your browser bar.

5. What rights do I have as a data subject

You can at any time 

• Receive information about the data we have stored or processed about you
• Request correction or deletion of your data
• Request restriction of the processing of your data
• Object to the processing of your data
• request the portability of your data
• File a complaint with the data protection supervisory authority. Your competent supervisory authority is the one in your place of residence. A list of the supervisory authorities can be found here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

6. How long will my data be stored

The data processed by us will be deleted or restricted in its processing in accordance with Articles 17 and 18 DSGVO. As soon as the data is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations, the data stored by us will be deleted. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law. According to legal requirements in Germany, the storage takes place in particular for 6 years in accordance with § 257 para. 1 HGB and for 10 years in accordance with Sec. 147 (1) HGB. 1 AO.

7. Analysis and marketing tools

Google Analytics with anonymization function 

We use the Google Analytics web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter “Google”).

Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. More information on the Privacy Shield agreement can be found here: 

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

Google Analytics uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf for the purpose of evaluating your use of our website, compiling statistics on website activity for website operators and providing other services relating to website activity and internet usage. Thereby, pseudonymous usage profiles of the users can be created from the processed data.

We use Google Analytics only with IP anonymization enabled. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by the user’s browser is not merged with other data from Google.

Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de 

However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

For more information, please see Google’s privacy policy: https://www.google.com/policies/privacy/

We use Google Analytics on the basis of our legitimate interests for the optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO on.

Google Tag Manager

We use the data we collect on the basis of our legitimate interests in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 para. 1 lit. f. DSGVO the “Google Tag Manager” to integrate and manage “website tags” on our website. Website tags” are keywords that are included in HTML elements. By using the Google Tag Manager, we can automatically track which button, link or personalized image you have actively clicked on and can then record which contents of our website are of particular interest to you. The Google Tag Manager also provides for the triggering of other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have deactivated at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

Facebook Pixel:

We will use the so-called “Facebook Pixel” on our website on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 lit. f. DSGVO in the analysis, optimization and economic operation of our online offer on our website, the so-called “Facebook Pixel” of Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA (hereinafter “Facebook”).

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. You can find more information here: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

By using the Facebook  Pixels, the behavior of users can be tracked after they have been redirected to our website by clicking on a Facebook ad (“so-called”. Conversion”). This procedure serves us to evaluate the effectiveness of Facebook ads for statistical and market research purposes and thus to optimize our future advertising measures. The data collected is anonymous for us and does not allow us to draw any conclusions about the identity of the users.

Your rights in this regard and options for protecting your privacy can be found in Facebook’s privacy policy at: https://www.facebook.com/about/privacy

8. Which third party services and content are integrated

Within our online offer, we use content or service offers of third-party providers on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always requires that the third-party providers of this content, perceive the IP address of the user, because without the IP address, they could not send the content to your browser. The IP address is thus required for the display of this content. If you would like to prevent the transfer of data to Google, you have the option of deactivating the respective service. For this purpose, you must disable the Java Script function in your browser.

Google Fonts

This site uses so-called web fonts of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For more information, please see Google’s privacy policy: https://www.google.com/policies/privacy/

Google is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law. More information on the Privacy Shield agreement can be found here: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

YouTube

On our website, we use the provider YouTube, LLC 901 Cherry Ave, 94066 San Bruno, CA, USA, a company of Google Inc, Amphitheatre Parkway, Mountain View, CA 94043, USA, for the integration of videos.

We use the option ” – enhanced privacy mode – ” provided by YouTube. When you call up a page that has an embedded video, a connection is established to the YouTube servers and the content is displayed on the website by informing your browser. In ” – extended data protection mode -“, only data is transmitted to the YouTube server, in particular which of our Internet pages you have visited when you watch the video. If you are logged in to YouTube at the same time, this information is assigned to your YouTube member account. If you would like to prevent this assignment, it is necessary to log out of your YouTube member account before visiting our website.

Further information on YouTube privacy is provided by Google at the following link:  https://www.google.de/intl/de/policies/privacy/

9. Links

Our website contains links to websites of other providers to which this data protection declaration does not extend. After clicking on the embedded graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transmitted to the respective provider. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers. Insofar as the collection, processing or use of personal data is associated with the use of the websites of other providers, please observe the data protection information of the respective providers