Privacy Policy and Consent
1. Purpose and Responsible Entity
This privacy policy explains the nature, scope, and purpose of the processing (including collection, processing, and use, as well as obtaining consent) of personal data within our online offering and its associated websites, functions, and content (hereinafter collectively referred to as “online offering” or “website”). The privacy policy applies regardless of the domains, systems, platforms, and devices (e.g., desktop or mobile) on which the online offering is executed.
The provider of the online offering and the entity responsible for data protection is Sunshine Wintergarten GmbH, Mr. Dipl. Ing. Kai Rengier, Boschstrasse 1, 48703 Stadtlohn (hereinafter referred to as “provider”, “we”, or “us”). For contact options, please refer to our imprint.
The term “user” encompasses all customers and visitors to our online offering. The terminology used, such as “user”, is to be understood as gender-neutral.
2. Basic Information on Data Processing
We process users’ personal data only in compliance with the relevant data protection regulations in accordance with the principles of data economy and data avoidance. This means that users’ data is only processed when there is a legal permission, particularly if the data is necessary for the provision of our contractual services and online services, or is legally required, or when consent is given.
We take organizational, contractual, and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are observed and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction, or against access by unauthorized persons.
If, within the framework of this privacy policy, content, tools, or other means from other providers (hereinafter collectively referred to as “third-party providers”) are used and their registered office is abroad, it is to be assumed that data transfer to the countries of residence of the third-party providers takes place. The transfer of data to third countries occurs either on the basis of legal permission, user consent, or special contractual clauses that ensure the legally required security of the data.
3. Processing of Personal Data
In addition to the uses explicitly mentioned in this privacy policy, personal data is processed for the following purposes based on legal permissions or user consent: – The provision, execution, maintenance, optimization, and security of our services and user benefits – Ensuring effective customer service and technical support
We only transfer users’ data to third parties if this is necessary for billing purposes (e.g., to a payment service provider) or for other purposes if these are necessary to fulfill our contractual obligations to users (e.g., address notification to suppliers).
When contacting us (via contact form or email), the user’s information is stored for the purpose of processing the request and in case follow-up questions arise. Personal data is deleted if it has fulfilled its purpose and deletion does not conflict with any retention obligations.
4. Collection of Access Data
We collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address, and the requesting provider.
We use the log data without attribution to the user’s person or other profiling in accordance with legal provisions only for statistical evaluations for the purpose of operation, security, and optimization of our online offering. However, we reserve the right to review the log data retrospectively if there is a justified suspicion of illegal use based on concrete indications.
5. Cookies & Reach Measurement
Cookies are information that is transferred from our web server or third-party web servers to the users’ web browsers and stored there for later retrieval. Users are informed about the use of cookies in the context of pseudonymous reach measurement within this privacy policy.
Viewing this online service is also possible without cookies. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. Excluding cookies may lead to functional limitations of this online service.
It is possible to manage many online advertising cookies from companies via the US website http://www.aboutads.info/choices or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.
Borlabs Cookie
This website uses Borlabs Cookie, which sets a technically necessary cookie (borlabs-cookie) to store your cookie consents.
Borlabs Cookie does not process any personal data.
The borlabs-cookie stores the consents you gave when entering the website. If you wish to revoke these consents, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked again for your cookie consent.
6. Google Analytics
We use Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google uses cookies. The information generated by the cookie about the use of the online service by users is usually transmitted to a Google server in the USA and stored there.
Google will use this information on our behalf to evaluate the use of our online service by users, to compile reports on activities within this online service, and to provide us with other services related to the use of this online service and internet usage. Pseudonymous user profiles of the users may be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the IP address of users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user’s browser is not merged with other data from Google. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and related to their use of the online service as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
For more information about Google’s use of data for advertising purposes, settings and objection options, please visit Google’s websites: https://www.google.com/intl/en/policies/privacy/partners (“How Google uses data when you use our partners’ sites or apps”), http://www.google.com/policies/technologies/ads (“Advertising”), http://www.google.com/settings/ads (“Control the information Google uses to show you ads”) and http://www.google.com/ads/preferences (“Make the ads you see more useful to you”).
7. Google Re/Marketing Services
We use the marketing and remarketing services (“Google Marketing Services”) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”).
Google Marketing Services allow us to display targeted advertisements for and on our website, presenting users with ads that potentially match their interests. For instance, if users are shown ads for products they have shown interest in on other websites, this is referred to as “remarketing”. For these purposes, when our website and other websites where Google Marketing Services are active are accessed, Google immediately executes a code and so-called (re)marketing tags (invisible graphics or code, also known as “web beacons”) are incorporated into the website. With their help, an individual cookie, i.e., a small file, is stored on the user’s device (comparable technologies may also be used instead of cookies). Cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, or googleadservices.com. This file records which websites the user has visited, what content they were interested in, and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visit time, and other details about the use of the online offer. The IP address of the users is also recorded, whereby we inform within the framework of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there. The IP address is not combined with the user’s data within other Google offerings. The aforementioned information may also be linked with such information from other sources. If the user subsequently visits other websites, ads tailored to their interests can be displayed to them.
Users’ data is processed pseudonymously within the framework of Google Marketing Services. This means that Google does not store and process, for example, the name or email address of users, but processes the relevant data cookie-related within pseudonymous user profiles. In other words, from Google’s perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected by “DoubleClick” about users is transmitted to Google and stored on Google’s servers in the USA.
The Google Marketing Services we use include, among others, the online advertising program “Google AdWords”. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. Cookies can therefore not be tracked across the websites of AdWords customers. The information obtained using the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
Another Google Marketing Service we use is the “Google Tag Manager”, which can be used to incorporate additional Google analysis and marketing services into our website (e.g., “AdWords”, “DoubleClick”, or “Google Analytics”).
For more information about Google’s use of data for marketing purposes, please see the overview page: https://www.google.com/policies/technologies/ads, Google’s privacy policy is available at https://www.google.com/policies/privacy.
If you wish to object to data collection by Google Marketing Services, you can use the settings and opt-out options provided by Google: http://www.google.com/ads/preferences.
8. Facebook Social Plugins
Our online offering uses social plugins (“plugins”) from the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins can be recognized by one of the Facebook logos (white “f” on blue tile, the terms “Like”, “Gefällt mir” or a “thumbs up” sign) or are marked with the addition “Facebook Social Plugin”. The list and appearance of Facebook Social Plugins can be viewed here: https://developers.facebook.com/docs/plugins/.
When a user accesses a feature of this online service that contains such a plugin, their device establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly from Facebook to the user’s device and integrated into the online service. In this process, user profiles can be created from the processed data. We therefore have no influence on the extent of data that Facebook collects with the help of this plugin and inform users accordingly based on our knowledge.
By integrating the plugins, Facebook receives the information that a user has accessed the corresponding page of the online service. If the user is logged into Facebook, Facebook can associate the visit with their Facebook account. When users interact with the plugins, for example by clicking the Like button or posting a comment, the corresponding information is transmitted directly from their device to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will learn and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.
Users can find information about the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as the related rights and setting options to protect users’ privacy, in Facebook’s privacy policy: https://www.facebook.com/about/privacy/.
If a user is a Facebook member and does not want Facebook to collect data about them via this online service and link it with their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US-American page http://www.aboutads.info/choices/ or the EU page http://www.youronlinechoices.com/. The settings are platform-independent, i.e., they are applied to all devices, such as desktop computers or mobile devices.
9. Newsletter
With the following information, we inform you about the contents of our newsletter as well as the registration, dispatch, and statistical evaluation procedures and your right to object. By subscribing to our newsletter, you agree to receive it and to the procedures described.
Content of the newsletter: We send newsletters, emails, and other electronic notifications with promotional information (hereinafter “newsletter”) only with the consent of the recipients or a legal permission. Insofar as the contents of a newsletter are specifically described in the context of a registration, they are decisive for the consent of the users. Otherwise, our newsletters contain the following information: our products, offers, promotions, and our company.
Double opt-in and logging: The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registration, you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register with other people’s email addresses. The newsletter registrations are logged in order to be able to prove the registration process according to legal requirements. This includes storing the registration and confirmation time, as well as the IP address. Likewise, changes to your data stored with the shipping service provider are logged.
The email addresses of our newsletter recipients, as well as their other data described in the context of these notes, are stored on the servers of the shipping service provider. The shipping service provider uses this information to send and evaluate the newsletters on our behalf. Furthermore, according to its own information, the shipping service provider may use this data to optimize or improve its own services, e.g., for the technical optimization of the shipping and the presentation of the newsletters or for economic purposes, to determine from which countries the recipients come. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
Registration data: To subscribe to the newsletter, it is sufficient if you provide your email address.
Statistical Collection and Analysis – The newsletters contain a so-called “web beacon”, i.e., a pixel-sized file that is retrieved from the dispatch service provider’s server when the newsletter is opened. As part of this retrieval, technical information such as browser and system information, as well as your IP address and time of retrieval, are initially collected. This information is used for technical improvement of services based on technical data or target groups and their reading behavior based on retrieval locations (which can be determined using the IP address) or access times. Statistical surveys also include determining whether newsletters are opened, when they are opened, and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Cancellation/Revocation – You can cancel the receipt of our newsletter at any time, i.e., revoke your consent. This simultaneously invalidates your consent to its dispatch by the dispatch service provider and the statistical analyses. Unfortunately, a separate revocation of the dispatch by the dispatch service provider or the statistical evaluation is not possible. You will find a link to cancel the newsletter at the end of each newsletter.
10. Integration of Third-Party Services and Content
It may occur that within our online offer, content or services from third-party providers, such as city maps or fonts from other websites, are integrated. The integration of third-party providers’ content always presupposes that the third-party providers perceive the IP address of the users, as they could not send the content to the users’ browser without the IP address. The IP address is therefore necessary for the display of this content. Furthermore, the providers of third-party content can set their own cookies and process users’ data for their own purposes. User profiles can be created from the processed data. We will use this content as data-sparingly and data-avoidingly as possible and select reliable third-party providers with regard to data security.
The following presentation provides an overview of third-party providers and their content, along with links to their privacy policies, which contain further information on data processing and, in some cases already mentioned here, opt-out options:
– External fonts from Google, Inc., https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts is done through a server call at Google (usually in the USA). Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– Maps of the “Google Maps” service from the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– We use Google reCAPTCHA from Google on our website. reCAPTCHA is used to check whether the data entry on our website (for example in the contact form) is done by a human or a program. reCAPTCHA analyzes the behavior of the website visitor based on various characteristics and information (e.g., IP address, mouse movements, and length of stay). This data is forwarded to Google. These reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place. We have a legitimate interest in protecting our web offerings from abusive automated spying and especially from SPAM. Information on Google reCAPTCHA: https://www.google.com/recaptcha/about/, Google Privacy Policy: https://www.google.com/intl/en/policies/privacy/.
– Videos from the “YouTube” platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy Policy: https://www.google.com/policies/privacy/, Opt-Out: https://www.google.com/settings/ads/.
– Catalogs and brochures from Yumpu or i-Magazine AG, CH-9444 Diepoldsau. For more information, please refer to the privacy policy and cookies.
11. User Rights and Data Deletion
Users have the right to receive, upon request and free of charge, information about the personal data that we have stored about them.
In addition, users have the right to correct inaccurate data, revoke consents, block and delete their personal data, and the right to file a complaint with the competent supervisory authority in the event of assumed unlawful data processing.
The data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.
12. Changes to the Privacy Policy
We reserve the right to modify the privacy policy to adapt it to changed legal situations, or in case of changes to the service and data processing. However, this only applies to statements regarding data processing. If user consent is required or if components of the privacy policy contain regulations of the contractual relationship with users, changes will only be made with user consent.
Users are requested to regularly inform themselves about the content of the privacy policy. Last updated: 22.03.2022