We take data privacy very seriously. We always handle and use personal data with the utmost confidentiality, and only in as far as legal regulations allow or you have consented to it.
However, we would like to point out that data transmission over the internet is generally subject to security risks. Complete protection against access by third parties is not possible. You may contact us by post or telephone about using our website if you have any data privacy concerns.
A. Responsible authority; Contact
The responsible authority concerning data protection laws is:
Gloogs Marketing SL
Local 9-10 / Calle Llaut 23
07610 Playa de Palma
represented by the managing director: Oliver Kramer
If you have any questions regarding how we process your personal data, or if you have any concerns about your rights as set out below in this statement, please contact the aforementioned data controller either by post or by telephone: +34 971 15 46 70 or by email: email@example.com.
Alternatively, you can also contact our data protection representative:
Henning Lüdecke | Lüdecke u. Fritzsch Lawyers, Hinüberstraße 8, 30175 Hannover, Germany Telephone: +49 (0)511/54304178, Email: Luedecke@LFLegal.de.
B. Processing of personal data; Intention; Deletion
Personal information includes all information that relates to an identified or identifiable person. An identifiable person is a natural person who directly or indirectly can be defined, in particular, by means of assignment of a name, an identification number, location data, an online-identifier or one or more specific features, which are an expression of the physical, physiological, genetical, psychological, economic, cultural or social identity of this natural person.
Processing means any operation or series of operations carried out with or without the aid of automated procedures in relation to personal data, such as the collection, organisation, categorisation, storage, adaptation or modification, reading, retrieval, use, disclosure by transmission, distribution or any other form of provision, synchronisation or linking, restriction, deletion or destruction of data.
The use of this website is possible anonymously, that is to say that no information about your person can be processed by us. Exceptions exist only in cases where your browser may not transmit anonymous (personal) data on its own accord. In so far as nothing to the contrary is mentioned in the following, our legal basis for the processing of such personal data that concerns you is Article 6, Para. 1, Sentence 1b) EU General Data Protection Regulation (hereinafter EU-GDPR), because data processing is necessary for the provision of the functions of the website as requested by you.
When accessing our website, we collect, store and use the following, normally anonymous data, short-term:
- the website visited
- time website was accessed
- the URL of the websites on which the user was directly prior to our website
- the number of data sent in bytes
- the user’s browser and browser version
- the user’s operating system
- the user’s IP address
We do not use these data in any way to identify you or to draw conclusions about your person. These data are stored on our server log files for a limited time. These data merely serve to enable our website to be displayed correctly, to conduct anonymous statistical analyses, to improve our website, to detect and trace technical errors on the website and, in case of unauthorised access or access attempts on our server, to initiate a derivation of personal data. We base our justification on Article 6, Para. 1 f) of the GDPR for cases such as these. After having achieved the purpose for which the data was stored, the data is routinely deleted or, if legal regulations or justified interests prevent deletion, blocked.
Personal data that you transmit to us online is only processed if it is necessary for the justification, implementation, termination or settlement of a contractual relationship between ourselves and you, or to answer any questions you may have. The following data are processed regularly by us in such cases:
- Name and surname
- Address, email address, fax and/ or telephone number
- Reason for contact
- Contract information (if applicable)
- Documents transmitted by you (if applicable)
- Information you provided verbally (if applicable)
As a rule, we do not pass on your personal data to third parties. This, however, does not apply to third parties who help us with contractual relationship transactions, such as the transport company charged with deliveries, or the bank entrusted with payment matters, as well as PayPal, if applicable. Also exempted are necessary data transmissions to accountants and the tax authorities. When data is transmitted to the third parties mentioned above, the scope of the transmitted data is limited to the necessary minimum.
We will delete the aforementioned personal data after the purpose for which they were processed has been achieved, unless we are required by law to store them for a longer period of time for tax and/or commercial storage and documentation obligations in accordance with Article 6, Para. 1, Sentence 1c) of the GDPR. This also applies if you have consented to further storage in accordance with Article 6, Para. 1, Sentence 1a) of the GDPR, or unless we need the data to protect our own legitimate interests or those of a third party and your fundamental rights or liberties do not outweigh our interests.
Cookies regularly serve the purpose of recognising the user, for example to remember a user’s shopping cart for a specific time, or to show behavioural advertising on the website. For this, information contained in the cookie is read out in case of a new visit to the website or a visit to a specific other website. This information may contain statistical as well as personal data, such as the user’s IP address.
In as far as the set cookies as well as the personal data are processed by us, processing is in accordance with Article 6, Para. 1, Sentence 1 b) of the GDPR for the protection of our legitimate interests in regard to the best possible, user-friendly functionality of our website.
Common internet browsers offer the option of not accepting cookies in their settings option, for example:
MS Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Apple Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Please note: It cannot be guaranteed that you will be able to access to all of this website’s functions without restrictions if you disable cookies.
D. Contact form
You have the possibility of contacting us through our website using our contact form. We will only use the personal data transmitted by you to process your specific inquiry if you use this feature. The data entered into the contact form is therefore processed based on your consent (Article 6, Para. 1 a) of the GDPR).
E. Newsletter subscription
We offer you a newsletter in which we inform you about news and current offers. If you would like to subscribe to the newsletter, you must provide a valid e-mail address. You can of course withdraw your consent to receive the newsletter at any time. To do so, please use the link provided in the newsletter or send a corresponding email message to the following address: firstname.lastname@example.org.
F. User rights
1. Right of access by the data subject (Article 15 GDPR)
Upon request and free of charge, we will disclose which personal data we have processed about you, for what purpose, at what time and to which categories of recipients we have disclosed the data or are planning to do so, if possible how long the data will be stored for or at least the criteria for determining the duration and, in the case that we did not receive the data from you personally, the origin of the data.
2. Right to rectification (Article 16 GDPR)
You have the right to request rectification of any incorrect or incomplete personal data that concerns you.
3. Right to erasure (‘right to be forgotten’) (Article 17 GDPR)
You have the right to the deletion of your personal data without delay, in so far as your request does not conflict with a legal obligation to store data or if data processing adversely affects our right to freedom of expression and information, or if we need the respective data to assert, exercise or defend legal claims.
4. Right to restriction of processing (Article 18 GDPR)
You moreover have the right to restrict the processing of your data if at least one of the following conditions is met:
5. Right to data portability (Article 20 GDPR)
Furthermore, you have the right to receive personal data concerning you that you provided to us in a structured, current and machine-readable format. You also have the right to transfer this data to another person in charge without obstruction on our part, provided that in exercising your right to the data transferability mentioned above, you have the right to request that your personal data be transferred directly by us to another person in charge in as far as this is technically feasible.
6. Right of objection (Article 21 GDPR)
You have the right to object to the processing of these data in cases where we process your personal data on the basis of justifiable interests in accordance with Article 6, Para.1, Sentence 1 f) of the GDPR, if there are reasons for this that relate to your particular situation. You moreover have the right to object against the processing of your personal data if it is part of one of our direct advertising campaigns.
7. Right of revocation
You have the right to revoke your consent at any time in accordance with Article 6, Para. 1, Sentence 1 a) or Article 9, Para. 2 a) of the GDPR for cases in which we process your personal data based on the consent granted to us by you. The legitimacy of the processed data until the point of revocation is not affected by the revocation.
8. Right of appeal (Article 77 GDPR)
You have the right of appeal through the supervisory authority if you believe that our processing of your personal data violates the GDPR regulations.
9. Exercise of rights
Please direct your questions concerning the exercise of the abovementioned rights to the person responsible mentioned in Section A.
We offer the option of processing the payment transaction via the payment service provider PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f EU-GDPR). In this context, we pass on the following data to PayPal, insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit. b. EU-GDPR): first name, last name, address, e-mail address, telephone number.
For the purpose of credit assessment, PayPal transmits data to credit agencies and receives information from them as well as, if applicable, creditworthiness information on the basis of mathematical-statistical procedures (probability or scoring values), the calculation of which includes, among other things, address data. Details on this and on the credit agencies used can be found in PayPal’s data protection regulations, which can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE.
We offer the option of processing the payment transaction via the payment service provider Stripe (c/o Legal Process, 510, Townsend St., San Francisco, CA 94103). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f EU-GDPR). In this context, we pass on the following data to Stripe, insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit b. EU-GDPR): name of the cardholder, email address, customer number, order number, bank details, credit card details, credit card validity period, credit card verification number (CVC), date and time of the transaction, transaction amount, name of the provider, location.
The processing of the aforementioned data is not required by law or contract. However, we cannot process a payment via Stripe without the transmission of your personal data. If you do not agree to the data processing described, you have the option to choose another payment method.
Stripe has a dual role in data processing activities as a controller and processor. As a controller, Stripe uses your submitted data to comply with regulatory obligations. This corresponds to Stripe’s legitimate interest (pursuant to Art. 6 para. 1 lit. f EU-GDPR) and serves the performance of the contract (pursuant to Art. 6 para. 1 lit. b EU-GDPR). We have no influence on this process.
Stripe acts as a processor in order to be able to complete transactions within the payment networks. Within the scope of the order processing relationship, Stripe acts exclusively according to our instructions and has been contractually obligated within the meaning of Art. 28 EU-GDPR to comply with the provisions of data protection law.
Stripe has implemented compliance measures for international data transfers. These apply to all global activities where Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).
For more information on opting out and opting in from Stripe, please visit: https://stripe.com/privacy-center/legal.
Your data will be stored by us until payment processing is complete. This includes the period required for processing refunds, claims management and fraud prevention.
I. Google Pay
We offer the option of payment via Google Pay. The provider of this payment service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, email: email@example.com (hereinafter “Google Pay”). If you select payment via GooglePay, the payment data you enter will be transmitted to GooglePay. The transmission of your data to GooglePay is based on Art. 6 para. 1 lit. a EU-GDPR (consent) and Art. 6 para. 1 lit. b EU-GDPR (processing for the performance of a contract).
You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
Further details on payment with Google Pay can be found in the following links:
J. Apple Pay
We offer the option of payment via Apple Pay. The provider of this payment service is Apple Inc, Infinite Loop, Cupertino, CA 95014, telephone: +1 408 996 1010, represented in Europe by Apple Distribution International Ltd, Hollyhill Industrial Estate, Hollyhill, Cork, Republic of Ireland, firstname.lastname@example.org, registration number: 470672, registered with the Irish Companies Registration Office, VAT number: DE 27946362, (hereinafter “Apple Pay”). If you select payment via Apple Pay, the payment data you enter will be transmitted to Apple Pay. The transmission of your data to Apple Pay is based on Art. 6 (1) a EU-GDPR (consent) and Art. 6 (1) b EU-GDPR (processing for the performance of a contract).
You have the option to revoke your consent to data processing at any time. A revocation does not affect the validity of past data processing operations.
Further details on payment with Apple Pay can be found on the following websites:
Our website uses plugins from the YouTube service. The operator of YouTube is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited.
If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
L. Google Analytics
We use Google Analytics to display the ads placed within advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Google (so-called “Remarketing Audiences” or “Google Analytics Audiences”). With the help of Remarketing Audiences, we also want to ensure that our advertisements correspond to the potential interest of the users and do not have a harassing effect.
We only use Google Analytics with IP anonymisation activated. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser will not be merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and related to their use of the online offer to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find out more information about Google’s use of data, setting and objection options on the Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when you use our partners’ websites or apps”), https://policies.google.com/technologies/ads (“Data use for advertising purposes”), https://adssettings.google.com/authenticated (“Manage information that Google uses to display advertising to you”). Otherwise, the personal data will be anonymised or deleted after a period of 14 months.
M. Google reCaptcha
For the purpose of data security, we use on these pages in certain cases the service reCaptcha of the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. This is primarily used to distinguish whether the input is made by a natural person or abusively by machine and automated processing. However, in the event that IP anonymisation is activated on this website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The service includes the sending of the IP address and possibly other data required by Google for the reCaptcha service to Google. The deviating data protection regulations of Google Inc. apply here. Further information on the data protection guidelines of Google Inc. can be found at http://www.google.de/intl/de/privacy or https://www.google.com/recaptcha/about/.
N. Google Maps
We use the Google Maps API on this site to visually display the location of our company and, if necessary, to make it easier for you to navigate to us. When using Google Maps, Google (Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) also collects, processes and uses data on the use of the Maps functions by visitors to the website.
O. Online presences in social media
We maintain online presences within social networks and platforms on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. EU-GDPR, we maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services there. When calling up the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.
Unless otherwise stated in our data protection information, we process the data of users if they communicate with us within the social networks and platforms, e.g. write posts on our online presences or send us messages.
We provide further data protection information on our respective presences in the social media.
We reserve the right to amend this data protection policy respective to changes in the law or changed requirements/ specifications on the part of the jurisdiction or the supervisory authorities in due course. The modified data protection policy is thereby valid at the point of its publication on our website. We therefore suggest that you visit our site regularly in order to be aware of any updates that may have been made.