Privacy policy
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Dominic VAH
Your rights as a data subject
Using the contact details of our data protection officer provided below, you may exercise the following rights at any time:
Information about your data stored by us and its processing (Art. 15 GDPR),
Rectification of inaccurate personal data (Art. 16 GDPR),
Erasure of your data stored by us (Art. 17 GDPR),
Restriction of data processing, insofar as we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
Objection to the processing of your data by us (Art. 21 GDPR) and
Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you may revoke it at any time with effect for the future.
You may also lodge a complaint with a supervisory authority at any time, e.g. the authority responsible for your place of residence or the authority responsible for us as the controller.
A list of supervisory authorities (for the non‑public sector) including addresses can be found here.
Collection of general information when visiting our website
Type and purpose of processing:
When you access our website (i.e. if you do not register or otherwise submit information), general information is collected automatically. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar data.
They are processed for the following purposes in particular:
Ensuring a smooth connection setup to the website,
Ensuring the smooth use of our website,
Evaluating system security and stability, and
to optimise our website.
We do not use your data to draw conclusions about your identity. Such information may be anonymised and evaluated statistically to optimise our website and the underlying technology.
Legal basis and legitimate interest:
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients:
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.
Storage period:
Data is deleted as soon as it is no longer required for the purpose for which it was collected. For data required to provide the website, this is generally the case when the respective session ends.
Provision required or necessary:
Providing the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, certain services may not be available or may be restricted. For this reason, an objection is excluded.
Cookies
Like many other websites, we use so‑called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
You can delete individual cookies or all cookies. You can also find information and instructions on how to delete cookies or block their storage in advance. Depending on your browser provider, you can find the required information at the following links:
Storage period and cookies used:
We use the szm_privacy cookie to store your consent decision (up to six months). After voluntary consent, the local visitor statistics use the session cookies szm_stats and szm_visit_v2, which expire when the browser session ends. No visitor statistics are recorded without consent.
Technically necessary cookies
Type and purpose of processing:
We use cookies to make our website more user‑friendly. Some elements of our website require the browser to be recognised even after changing pages.
The purpose of technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without cookies. For these, it is necessary that the browser is recognised even after changing pages.
We require cookies for the following applications:
Legal basis and legitimate interest:
Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user‑friendly design of our website.
Recipients:
Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.
Provision required or necessary:
Providing the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, certain services may not be available or may be restricted.
Objection
Please read the information about your right to object under Art. 21 GDPR below.
Optional visitor statistics
We collect visitor statistics only after your active consent. The legal basis is Art. 6(1)(a) GDPR. You may use the website even if you decline, and withdraw your consent at any time for future processing via “Privacy settings” in the footer.
After consent, we record one entry per browser session containing the date, time including time-zone offset, country, referring domain, entry page, page language, device type (mobile or desktop), and at most the first subsequent internal page view or click on our catalog or B2B shop. We do not record further page views or clicks. If there is no next action, that field remains empty. For catalog and B2B shop links, we record the click, not actual use of the destination.
The IP address is processed on our server solely to determine the approximate country using the locally hosted DB-IP Country Lite database; it is not included in the statistics file. The device type is roughly determined from the device information sent by the browser; the full browser user-agent string is not stored in the statistics file. Neither a persistent visitor identifier nor a session identifier is saved in the CSV file. The file is stored in a server directory protected against public access.
We store your consent choice in your browser for up to six months. A temporary session cookie links the entry page and the first subsequent action. Individual records are manually deleted no later than the end of the calendar month following collection. You can withdraw consent at any time via “Privacy settings” in the footer; withdrawal takes effect for future processing.
Country information is based on the database provided by DB-IP (Country Lite, CC BY 4.0).
Locally hosted fonts
Our website loads font files hosted on our own web server. No request to Google Fonts is made to load these fonts.
SSL encryption
To protect the security of your data during transmission, we use state‑of‑the‑art encryption methods (e.g. SSL) via HTTPS.
Information about your right to object under Art. 21 GDPR
Right to object on a case‑by‑case basis
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR (processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Changes to our privacy policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions for the data protection officer
If you have questions about data protection, please email us or contact the person responsible for data protection in our organisation directly: info@spielzeugmanufaktur.com