I. Who is responsible and how can I contact the data protection officer?
The controller within the meaning of the GDPR is:
purePepper Media & Sales GmbH
Beim Alten Ausbesserungswerk 4
D-77654 Offenburg
If you have any questions about the processing of your personal data by us or about data protection in general, please contact the data protection officer at the address given in the legal notice or at the following e-mail address:
II. Processing of personal data by the purePepper
In the following, we would like to give you an overview of how we guarantee the protection of your personal data and what types of personal data we process, for what purposes and to what extent.
- Processing of data when accessing our website – log files
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. In addition, the IP address is transmitted and used to use the service you have requested. This information is technically necessary in order to correctly deliver the website content you have requested and is mandatory when using the Internet.
This log file data is anonymized or deleted by us immediately after the end of the usage process. The legal basis for data processing is Art. 6 para. 1 sentence 1 f) GDPR. - Processing of data when using the website – your inquiries
If you send us an inquiry by email or via the contact form, we will collect the data you provide in order to process and respond to your request. We store this data for verification purposes for a period of up to two years. Legal basis for data processing Art. 6 para. 1 sentence 1 letter f GDPR. - Notes on ensuring data security
We take technical and organizational security precautions on our website in order to protect the personal data stored by us from access by third parties, loss or misuse and to enable secure data transfer, and we must point out that the structure of the Internet can lead to unwanted access to data by third parties. It is therefore also your responsibility to protect your data against misuse through encryption or in some other way. Without appropriate protective measures, unencrypted data in particular can be read by third parties, even if it is sent by e-mail. - Use of a consent management platform
On our website, we use the consent management platform operated by our contracted and controlled service provider. This tool is used to manage consent to the setting of cookies and the integration of external service providers and their verification. To prove consent, we store information about the device you are using, information about your browser, anonymized IP address, date and time of the visit as well as opt-in and opt-out data for three years. The legal basis for the storage of this data is Art. 6 para. 1 sentence 1 lit. c GDPR.
III. Your rights as a data subject
Every data subject has the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to restriction of processing of personal data (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
You can object to the processing of personal data for advertising purposes, including the analysis of customer data for advertising purposes, at any time without giving reasons.
In addition, the data subject also has a general right to object (see Art. 21 (1) GDPR). In this case, the objection to data processing must be justified. If the data processing is based on consent, your consent can be revoked at any time with effect for the future.
The easiest way to exercise your rights as a data subject is to contact or the address given in the legal notice. You also have the right to lodge a complaint with a data protection supervisory authority.
IV. Integration of third-party services
1. Integration of Google-TAG-Manager
For the delivery of online advertising and the integration of external partners, we use the Google Tag Manager of the service provider Google Ireland Limited. This enables us to control the delivery of online advertising. This tool works without cookies, but nevertheless requires the transmission of IP addresses to Google. The use and utilization of the tag manager is measured here. We have activated the anonymization of the IP address before it is forwarded to Google. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The data collected will be deleted after two years.
2. Integration of social plug-ins
Our website uses social plug-ins (“plug-ins”) from various social networks such as Facebook.com, Twitter.com, Google+ and Pinterest. The purpose of these plug-ins is to provide you with an opportunity to interact with your contacts and to easily disseminate interesting information. These plug-ins can be recognized by the respective logo in the network. We use a 2-click solution so that no data is transferred when you simply visit the website. Only when you click on such a plug-in does your browser establish a direct connection with the servers of the respective network. The content of the plug-in is transmitted by the network directly to your browser, which integrates it into the website. If these networks are based outside the EU or the EEA, we therefore cannot rule out the possibility that your data will be transferred to a server outside the EU/EEA and processed there. We have no influence on the scope or the period of use of the data that the respective network collects with the help of this plug-in and therefore inform you according to our level of knowledge: By integrating the plug-in, the respective network receives the information that you have accessed the corresponding page of our website. If you are logged in to one of the networks, this network can assign this information to your profile. If you do not want the network to collect information about your visit to our website, you must therefore log out beforehand. However, it is generally possible for the network to find out your IP address and store it, even though you have not registered there or are not logged in. We also have no information on the deletion of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles by the service providers.
The legal basis for the use of the plug-ins is Art. 6 para. 1 sentence 1 lit. f GDPR. The purpose, duration and scope of data collection and the further processing and use of your data as well as your rights in this regard and setting options to protect your privacy can be found in the data protection notices of the respective social networks:
- Facebook: http://www.facebook.com/policy.php.
- Instagram: https://help.instagram.com/519522125107875?helpref=page_content
V. Our cookie policy
1. General information on the use of cookies
Our website uses so-called cookies. Cookies are small text files that are stored on your end device and saved by your browser. They serve to make our services more user-friendly, effective and secure. We use both temporary cookies, which are automatically deleted when you close your browser (“session cookies”), and persistent (permanent) cookies.
You have the choice of whether you want to allow cookies to be set. You can make changes in your browser settings. In principle, you have the choice of accepting all cookies, being informed when cookies are set or rejecting all cookies. If you choose the latter option, you may not be able to make full use of our website. You can make individual settings in the cookie settings.
When cookies are used, a distinction must be made between cookies that are absolutely necessary and cookies that are used for other purposes (measurement of access figures, advertising purposes).
2. Mandatory cookies when using the website
We use session cookies on our websites that are absolutely necessary for the use of our websites. These include cookies that enable us to recognize you while you visit the site during a single session. These session cookies contribute to the secure use of our website, for example by enabling the secure use of the member portal.´
3. Use of cookies with your consent
Below you will find an overview of the cookies that we use with your consent given at the beginning of your use of the website. You will also find an opt-out option with each explanation of the use. These are cookies for recording the usage behavior of our website and cookies that are used for advertising purposes.
4. Use of cookies to record user behavior (tracking)
The use of tracking cookies enables us to recognize users when they access our website again and thus assign usage processes to an internally assigned identification number (pseudonym). This allows us to record and analyze repeated visits to our website.
Specifically, the following tracking cookies are used:
Tracking through Matomo
We use the web analysis service Matomo on this website. This tool uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. With the help of the tool, we collect information about your last visits to our website and how you move around our website, and use this information to evaluate your use of the website and to compile reports on website activity´
The data collected by the Matomo web analysis service is stored and processed on servers in Germany.
We use the web analysis service to analyze the use of our website and thus better understand how visitors use our website so that we can make it even more intuitive. The legal basis for the storage of cookies is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and the further evaluation of the data collected over a period of 13 months is the balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. You can revoke your consent at any time with effect for the future in our cookie settings.
Facebook Pixel/ Custom Audience
We have integrated a Facebook pixel from Facebook Ireland Limited on our website. When our website is accessed, data is forwarded to Facebook via a re-direct. The following data may be forwarded:
- Unique Cookie ID
- Website accessed
- Date and time
Facebook can mark the end device you are using with a cookie and a unique identifier or read an existing cookie. If you are logged in to Facebook, this data can be used to display targeted advertising for us on Facebook pages. The data is also processed by Facebook in the USA. Your data will only be transferred to the USA with your express consent. The legal basis for the storage of the cookie is the consent given (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time in our cookie settings. Facebook is responsible for the further analysis of the data collected. You can change your Facebook settings for advertising here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
Status: 08.04.2024