Privacy Policy Website https://europe.calaboards.com

1. Introduction and Terms
2. GENERAL

By operating our website with the URL https://europe.calaboards.com (hereinafter referred to as “website”), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws – in particular the German Data Protection Regulation (DSGVO) and the German Federal Data Protection Act (BDSG). With these data protection provisions, we want to inform you about which personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. In addition, we will explain what rights you have to protect and enforce your data protection.

2. DEFINITIONS

Our data protection provisions contain technical terms that are in the DSGVO and the BDSG. For your better understanding, we would like to explain these terms in simple terms in advance:

2.1 Personal data

“Personal data” is any information relating to an identified or identifiable person (Art. 4 No. 1 DSGVO). Information of an identified person can be, for example, the name or the e-mail address. However, personal data is also data where the identity is not immediately obvious, but can be determined by combining one’s own information or that of others and thus finding out who it is. A person can be identified, for example, by providing your address or bank details, your date of birth or user name, your IP addresses and/or location data. Relevant here is all information that in any way allows a conclusion to be drawn about a person.

2.2 Processing

Article 4 No. 2 of the GDPR defines “processing” as any operation relating to personal data. This applies in particular to the collection, recording, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or other form of making available, alignment or combination, restriction, erasure or destruction of personal data.

1. Data Controller and Data Protection Officer
2. RESPONSIBLE

The person responsible for data processing is:

Company: HappyService GmbH (“we”)

Legal representative: Ronny Kießling (Managing Director)

Address: Thurn-und-Taxis-Platz 6, 60313 Frankfurt, Germany

E-mail: [email protected]

4. DATA PROTECTION OFFICER

We have appointed an external data protection officer for our company. You can reach him under:

Name: Arne Platzbecker

Address: HABEWI GmbH & Co. KG, Palmaille 96, 22767 Hamburg, Germany

Telephone: 040/ 46008966

 Fax: 040/ 46008977

 E-mail: [email protected]

III. processing framework

5. PROCESSING FRAMEWORK: WEBSITE

Within the framework of the website, we process the personal data of you listed in detail below in section IV. We only process data from you that you actively provide on the website (e.g. by filling in forms) or that you provide automatically when using our services.

Your data will only be processed by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called order processing, in which we as the client are authorised to issue instructions to our contractors. We use external service providers for the hosting of our website. We host our website with the external provider hostNet Medien GmbH, Osterdeich 107, 28205 Bremen. If further external service providers are used for individual processing operations listed in section IV, they will be named there.

As a matter of principle, we do not transfer data to third countries and do not plan to do so. We will provide information on exceptions to this principle in the processing operations described below. Any data transfer to third countries will then take place on the basis of the so-called EU standard contractual clauses.

1. The processing in detail
2. PROVISION OF THE WEBSITE AND SERVER LOG FILES

6.1 Description of the processing

Each time you access the website, we automatically collect information that your browser transmits to our server. This is the following data:

– IP address

– browser software used, as well as its version and language

– operating system

– the website from which visitors came to the website (so-called referrer)

– the sub-pages accessed on the website

– the date and time the website was accessed

These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to a user’s terminal device. For this purpose, the user’s IP address must remain stored for the duration of the session. However, your IP address is not stored in the log files.

6.2 Purpose

The processing is carried out to enable the website to be called up and to ensure its stability and security. Furthermore, the processing serves the statistical evaluation and improvement of our online offer.

6.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f DSGVO). Our legitimate interest lies in the purpose named in section 6.2.

6.4 Storage period

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The log files are deleted after 7 days.

7. COOKIES

7.1 Description of processing

Our website uses cookies. Cookies are small text files that are stored on the user’s terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and possibly certain functions of a website. We distinguish between our own cookies and external, so-called third-party cookies. So-called “session cookies” and “persistent cookies” are used on our site. “Session cookies” are automatically deleted when you end your internet session and close the browser. Persistent cookies remain stored on your end device for a longer period of time. If cookies are technically necessary for the operation of our site, your consent is not required for this. All other cookies that are not technically necessary are only set after you have actively consented to the use of cookies via our Consent Tool. We use the “Billbee” service to obtain and document consent. The Consent Tool itself saves your selection in a cookie on your end device. This means that you do not need to make a decision about cookies again on a subsequent visit to our website.

You can find out which cookies are used on our website for which purpose, how long they are stored on your end device and which consents you have already declared, if any, in the settings of the Consent Tool […].

7.2 Purpose

We use cookies to make our website more user-friendly and to offer the functions described in section 7.1.

7.3 Legal basis

The processing is necessary with regard to technically required cookies, as well as the use of the Consent Tool to protect the overriding legitimate interests of the controller (Art. 6 (1) lit. f DSGVO). Our legitimate interest lies in the purpose named in section 7.2. With regard to the processing of all other cookies – i.e. cookies that are not technically necessary – the legal basis is consent (Art. 6 (1) a DSGVO). Such consent is voluntary.

7.4 Storage period, revocation of consent

Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your terminal device, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies for our website are deactivated, deleted or restricted, it may be that individual functions of our website cannot be used or can only be used to a limited extent. You can revoke any consent you may have given for the use of cookies at any time in the settings of the […] consent tool with effect for the future.

7.5 Recipients

When third-party cookies are used, data may be transmitted to the corresponding providers of these third-party services. In this case, data may also be transmitted to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transmission to third countries in the settings of the Consent Tool or in the corresponding passage for the third-party service in these data protection provisions.

8. CONTACTING US BY E-MAIL

8.1 Description of processing

 To contact us, you can write to us via the e-mail address provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.

8.2 Purpose

The data transmitted with and in your e-mail will be used exclusively for the purpose of processing and responding to your request.

8.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 8.2. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b DSGVO).

8.4 Storage period

We delete the data as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. The communication is deemed to have ended when it is clear from the circumstances that your concern has been conclusively clarified. If legal retention periods prevent deletion, the data will be deleted immediately after expiry of the legal retention period.

9. SOCIAL NETWORKS

9.1 Description of processing

Our website does not use any so-called social media plugins. The Facebook, Instagram and YouTube logos displayed on our website are merely linked to the corresponding profiles of our company on the social networks. A data transfer to the social networks does not take place with the integration of the logos. If you click on one of the logos, you will only be redirected to the external website of the respective social network.

However, our profiles within the social networks do constitute data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g. comment, “share”, “like” or “retweet” a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.

On the social network Facebook, we have the possibility to obtain statistical data about the use of our Facebook page via the so-called “Insights” function. These statistics are provided by Facebook. The “Insights” function cannot be disabled. We cannot decide to switch this function on or off. It is available to all Facebook Fan Page operators, regardless of whether you use Facebook’s Insights feature or not. We are provided with the following data via Facebook Insights for a selectable period of time with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. In the Insights statistics, it is not possible for us to identify subscribers and fans of our page and to view their profiles.

On the social networks Facebook and Instagram, we have the possibility to obtain statistical data about the use of our Facebook page or our Instagram profile via the so-called “Insights” function. These statistics are provided by Facebook and Instagram. The “Insights” function cannot be disabled. We cannot decide to turn this feature on or off. It is available to all Facebook Fan Page operators and all Instagram business account operators, regardless of whether you use the Insights feature or not.

We are provided with the following data via Facebook Insights for a selectable period of time in anonymised form with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. With the Insights statistics, it is not possible for us to identify subscribers and fans of our page and to view their profiles.

Furthermore, Instagram Insights provides us with anonymised data on the development and reach of our Instagram profile and the posts, stories and videos we post there. We also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile in the Instagram insights.

The social networks with which you communicate store your data using pseudonyms as usage profiles and use them for advertising purposes and market research. For example, you may be shown advertisements within the social network and on other third-party websites that match your presumed interests. Cookies are usually used for this purpose, which the social network stores on your end device. You have the right to object to the creation of these user profiles, for the exercise of which you must contact the social networks directly.

9.2 Purpose

We maintain profiles on the aforementioned social networks for the purpose of public relations and corporate communication with customers and interested parties. We use the “Insights” function of Facebook and Instagram to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.

9.3 Legal basis

The legal basis for data processing in the context of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 (1) lit. f DSGVO). Our legitimate interest lies in the purpose named in section 7.2. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 para. 1 lit. a DSGVO.  The data processing with regard to our Facebook page and our Instagram page is otherwise carried out on the basis of joint responsibility pursuant to Art. 26 DSGVO.

9.4 Recipients and transmission to third countries

The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection provisions.

– Facebook: Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA. Privacy policy: http://www.facebook.com/policy.php; http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo.

– Instagram: Instagram LLC, 1601 Willow Rd, Menlo Park, California 94025, USA; privacy policy: https://help.instagram.com/155833707900388/.

– YouTube: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA. YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy of Youtube/Google: https://www.google.com/policies/privacy/partners/?hl=de.

The social networks also process your personal data in the USA.

10. GOOGLE ANALYTICS

10.1 Description of processing

Our website uses “Google Analytics”, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses cookies (see section 7.), which enable an analysis of your use of our website.  The information generated by the cookies is usually transferred to a Google server in the USA and stored there. However, we use Google Analytics exclusively with IP anonymisation. This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics generated by Google Analytics record, in particular, how many users visit our website, from which country or location the access takes place, which sub-pages are called up and via which links or search terms visitors reach our website. You can find the Google Analytics user conditions at http://www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics is available at http://www.google.com/intl/de/analytics/learn/privacy.html. Google’s privacy policy can be viewed at http://www.google.de/intl/de/policies/privacy.

10.2 Purpose

The processing takes place in order to be able to evaluate the use of our website. The information thus obtained is used to improve our online presence and to design it in line with requirements.

10.3 Legal basis

The processing is carried out on the basis of consent in accordance with Art. 6 Para. 1 lit. a DSGVO. This is obtained by us via the Consent Tool (see section 7.1). Such consent is voluntary.

10.4 Storage period and right of objection, revocation of consent

We have explained the storage period and your control and setting options for cookies in section 7.4. You can revoke your consent with regard to Google Analytics at any time in the settings of the consent tool with effect for the future. Alternatively, you can object to data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at https://tools.google.com/dlpage/gaoptout?hl=de. The analysis data processed and stored with Google Analytics will be automatically deleted by us after 14 months.

10.5 Recipients and transmission to third countries

According to the German data protection supervisory authorities (Data Protection Conference), Google Analytics is jointly responsible for data processing on our behalf. Against this background, we have also concluded the “Google Measurement Controller-Controller Data Protection Terms” with Google. Google also processes your personal data in the USA.

11. GOOGLE WEBFONTS

11.1 Description of processing

Our website uses “Google Webfonts”, a font substitution service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). With Google Webfonts, the standard fonts of your terminal device are replaced by fonts from Google’s catalogue when our website is displayed. If your browser disables the integration of Google Web Fonts, the text of our website will be displayed in the standard fonts of your end device. The Google fonts are loaded directly from a Google server. For this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Webfonts does not store any cookies on your terminal device. According to Google, data processed as part of the Google Webfonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail. Further information on data protection at Google Webfonts can be found at https://developers.google.com/fonts/faq?hl=de-DE&csw=1. General information on data protection at Google can be found at https://policies.google.com/privacy?hl=de-DE.

11.2 Purpose

The processing takes place in order to be able to display the text of our website in a more readable and aesthetically pleasing manner.

11.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 11.2.

11.4 Recipients and transmission to third countries

Through the use of Google Web Fonts, personal data may be transmitted to Google. Google also processes your personal data in the USA.

12 YOUTUBE

12.1 Description of processing

Our website uses services from “YouTube” a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrame so that they can be played directly on our website. The videos are embedded in the “extended data protection mode” offered on YouTube, i.e. no personal data will be transmitted from you to Google as long as you do not play the videos. Only when you play a video will data be transmitted to Google, over which we have no control. If you play a video embedded on a sub-page of our website, Google will be informed which sub-page you have visited and which video you have viewed. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will associate this information with your user account. Google stores your data as user profiles and uses them for advertising purposes, market research and/or to tailor Google’s websites to your needs. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly. Further information on data protection at Google can be found at www.google.com/intl/de-DE/policies/privacy/.

12.2 Purpose

The processing takes place in order to be able to show you videos on our website.

12.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in section 12.2.

12.4 Recipients and transmission to third countries

Through the integration of YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA.

13. GOOGLE MAPS

13.1 Description of processing

Our website uses “Google Maps”, a map display service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”). We use Google Maps by embedding a map with our business address on our website. The map is loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Maps does not store any cookies on your terminal device. If you are logged in to Google when you visit our site, Google Maps will associate this information with your Google user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly. Further information on data protection at Google can be found at https://policies.google.com/privacy?hl=de-DE.https://policies.google.com/privacy?hl=de-DE.

13.2 Purpose

The processing is carried out in order to be able to display an interactive map on our website.

13.3 Legal basis

The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6(1)(f) DSGVO). Our legitimate interest lies in the purpose named in the paragraph.

13.4 Recipients and transfer to third countries

Google also processes your personal data in the USA.

14. GOOGLE TAG MANAGER

Our website uses the “Google Tag Manager”, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). No personal data is collected via the Google Tag Manager and no cookies are set. This service only enables us to integrate and manage tags on our website. Tags are small code elements on our website that are helpful to build on with other tools, e.g. to measure traffic and visitor behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting, to test and optimise the website. For more information on Google Tag Manager, please visit https://www.google.com/intl/de/tagmanager/use-policy.html.

1. Security Measures
2. security measures

 To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user’s end device. You can recognise active SSL or TLS encryption by a small lock logo displayed on the far left of the browser address bar.

1. your rights
2. data subject rights

With regard to the data processing by our company described above, you are entitled to the following data subject rights:

16.1 Information (Art. 15 DSGVO).

You have the right to request confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 DSGVO under the conditions specified in Art. 15 DSGVO.

16.2 Correction (Art. 16 DSGVO)

You have the right to request that we correct any inaccurate personal data relating to you without undue delay and, where applicable, to complete any incomplete personal data.

16.3 Deletion (Art. 17 DSGVO)

You have the right to request that we delete personal data relating to you without undue delay if one of the reasons listed in detail in Art. 17 DSGVO applies, e.g. if your data is no longer required for the purposes we pursue.

16.4 Restriction of data processing (Art. 18 DSGVO)

You have the right to request us to restrict processing if one of the conditions listed in Art. 18 DSGVO applies, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.

16.5 Data portability (Art. 20 DSGVO)

You have the right, under the conditions set out in Art. 20 DSGVO, to request that the data relating to you be handed over in a structured, common and machine-readable format.

16.6 Withdrawal of consent (Art. 7 (3) DSGVO)

You have the right to revoke your consent at any time in the case of processing based on consent. The revocation applies from the time it is asserted. In other words, it is effective for the future. The processing therefore does not become unlawful retroactively as a result of the withdrawal of consent.

16.7 Complaint (Art. 77 GDPR)

If you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You may exercise this right before a supervisory authority in the EU Member State of your residence, place of work or the place of the alleged infringement.

16.8 Prohibition of automated decisions/profiling (Art. 22 GDPR)

Decisions which have legal effects concerning you or which significantly affect you must not be based solely on automated processing of personal data – including profiling. We inform you that we do not use automated decision-making, including profiling, with regard to your personal data.

16.9 Right to object (Art. 21 DSGVO)

If we process personal data of yours on the basis of Art. 6(1)(f) DSGVO (to protect overriding legitimate interests), you have the right to object to this under the conditions set out in Art. 21 DSGVO. However, this only applies insofar as there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case – also irrespective of a specific situation – you have the right to object at any time to the processing of your personal data for direct marketing.

Status: March 2021