The Supervisory Authority
The competent data protection authority is:
The state commissioner for data protection and freedom of information in Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)
Lautenschlagerstrasse 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de
What is personal data?
According to the German Federal Data Protection Act (Bundesdatenschutzgesetz) (“BDSG”) and the EU`s General Data Protection Regulation (GDPR), personal data are "any information relating to an identified or identifiable natural person. This is, for example, name or address data, telephone number, mobile number, bank details or insurance number.
General information on data processing
All personal data that we obtain from you via the website will be processed for the purposes described in more detail below. This is done within the framework of the BDSG and GDPR or with your consent. And of course, only when data processing is permitted and if:
- you have given your consent,
- the data is necessary for the fulfilment of a contract / pre-contractual measures,
- the data is necessary for the fulfilment of a legal obligation or
- the data is necessary to protect the legitimate interests of our company, provided that your interests are not overridden.
What data do we process?
Most of the data we process is provided by you when you contact us. Further, we also automatically collect technical device and access data that occur during your interaction with our website.
a) Log files and Cookies
Even if you do not log in or register on our website, but simply browse our website, data is collected and stored and processed by us. Specifically, this requires the IP address of your computer, Date and time of access, Name and URL of the accessed file, Browser used, Number of bytes transferred, Status of the page retrieval, Session ID, Referrer URL.
In addition, we use cookies and analysis services when you visit www.ad4fun.com. You can find more information in our Cookie Policy. The legal bases for processing are contract and our legitimate interest. The collection and processing of this data is necessary from a technical point of view so that you can use our website.
b) Contacting us
If you contact us via e-mail, we store and process the following data from you: e-mail address, Name and telephone number, if provided, as well as other personal data that you provide when contacting us.
This data is collected and processed exclusively for the purpose of contacting you and processing your request and then deleted, provided there is no legal obligation to retain it. The legal bases for processing are contract and our legitimate interest.
Integration of third-party services and content
We use content or service offers of third-party providers on the basis of our legitimate interests in order to integrate their content and services (hereinafter uniformly referred to as "content").
This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content.
Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of our website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our website, as well as being linked to such information from other sources.
The following provides an overview of third-party providers and their content, together with links to their privacy policies, which contain further information on the processing of data and so-called opt-out measures, if any:
- Hosting: Web Hosting Provider: AWS
- Hosting: Content Delivery Network: Cloudflare
The legal basis for the data processing is your consent and our legitimate interest.
Authorities and other third parties
In the event of certain legal incidents, we are obliged to pass on our customers' data to law enforcement authorities or other third parties. This may be the case, for example, for official and court decisions or for legal and criminal prosecution.
How is my data protected?
We want you to feel and be safe on our website. Therefore, we take various measures to meet both the legal requirements and our own very high standards of data protection and data security.
AD4FUN takes the protection of your personal data seriously. All data is handled and processed in accordance with the BDSG and GDPR, which ensures the highest standards of data protection.
Our data processing is subject to the principle that we only process the personal data that is necessary for the sensible and economic use of our offer. In doing so, we take great care to ensure that your privacy and the confidentiality of all personal data are always guaranteed.
All transmitted data is protected by TLS encryption. Transport Layer Security (TLS) is a protocol used to ensure secure data transmission on the Internet. The public-private key procedure is used here. This means that data encrypted with a publicly accessible key can only be decrypted again with a separate private key.
AD4FUN uses technical and organizational security measures (TOMs) throughout the company to protect the data we manage from you against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons. For example, we regularly train all employees on current IT security topics.
Duration of data storage
We store personal data on our secure server and only for as long as it is necessary for the purposes for which it is processed or for as long as any consent you have given us has been revoked by you. Insofar as statutory retention obligations must be observed, the storage period for certain data may be up to 6 years, irrespective of the processing purposes.
Your data subject rights
These rights are standardized in the BDSG and GDPR. These include:
- the right to information,
- the right to rectification,
- the right to erasure,
- the right to restriction of data processing,
- the right to data portability,
- the right to object to data processing,
- the right to revoke any consent you have given, and
- the right to lodge a complaint with the competent supervisory authority.
We encourage you to contact us if you have any information requests, requests for information or objections about data processing or concerns. However, you also have the right to file a complaint with your local supervisory authority. However, we would appreciate it if you would contact us with your concern before turning to a supervisory authority.
Updating your information
If you believe that the information, we hold about you is inaccurate or that we are no longer entitled to use it and want to request its rectification, deletion, or object to its processing, please do so by contacting us. For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer the above requests.
Keep in mind, we may reject requests for certain reasons, including if the request is unlawful or if it may infringe on trade secrets or intellectual property or the privacy of another user. Also, we may not be able to accommodate certain requests to object to the processing of Personal Data, notably where such requests would not allow us to provide our service to you anymore.
Withdraw your consent
You may withdraw your consent and request us to stop using and/or disclosing your Personal Data for any or all of the Purposes by submitting your request to us. Should you withdraw your consent to the collection, use or disclosure of your Personal Data, it may impact our ability to proceed with your transactions, agreements, or interactions with us. Prior to you exercising your choice to withdraw your consent, we will inform you of the consequences of the withdrawal of your consent. Please note that your withdrawal of consent will not prevent us from exercising our legal rights (including any remedies) or undertaking any steps as we may be entitled to at law.
Personal Data and children
Our services are aimed at people aged 16 and over. We will not knowingly collect, use or disclose Personal Data from minors under the age of 16 without first obtaining consent from a legal guardian through direct offline contact.
Changes to this Privacy Policy
We are constantly developing and improving our website - and as a result, some of the information in this Privacy Policy is likely to change. We therefore recommend that you read this Privacy Policy again from time to time so that you are informed about the current status. This Privacy Policy was last updated on Saturday, 03rd of December 2022.
Do you have any questions?
Please contact us if you have any comments or questions about this policy and/or our use of your Personal Data.