Data Privacy Statement
1. Data privacy at a glance
The following information gives a simple overview of how your personal data is used when you visit our website. Personal data is all data with which you can be personally identified. You can find more detailed information about data privacy in the data privacy statement below.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator whose contact details can be found in the website’s legal notices page.
How do we collect your data?
Your data is collected in the first place because you agree to share it with us. This could, for example, be data that you submitted in a contact form.
Other data is automatically collected by our IT systems when you visit our website. This is primarily technical data (e.g. internet browser, operating system of the time of the page view). This data is collected automatically, as soon as you visit our website.
What do we use your data for?
Part of the data is collected to optimise your visit to the website. Other data can be used to help us analyse your user behaviour on the website.
What are your rights with regard to your data?
You have the right at any time to find out the origin, recipient and purpose for which your personal data has been stored and may apply to receive this information at no charge. You also have the right to ask for this data to be corrected, blocked or deleted. On this and other data protection issues, you can always contact us directly via the address in the legal notice at the bottom of the page. Furthermore you also have the right of recourse to the responsible regulatory authority.
Analysis and third-party tools
You can opt out of this analysis. There is more information about how to opt out in the data privacy statement.
2. General instructions and mandatory information
The operators of these sites take the protection of your personal data very seriously. We handle your personal data confidentially and in line with both the legal data privacy regulations and this data privacy statement.
Whenever you use this website, different pieces of personal data are collected. Personal data is data with which you can be personally identified. The following data privacy statement explains what data we collect and what we use it for. It also explains how it works and for what purpose.
We note that online data transfer (e.g. e-mail communication) can cause gaps in security. Complete data protection from the unauthorised access of third parties cannot be ensured.
Declaration of responsible authority
The responsible authority for the data processing on this website is:
sun.factory Deutschland GmbH
Telephone: +49 941 39 647 -0
The responsible authority is the natural person or legal entity, which alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses etc.).
Revocation of consent for data processing
Many data processing activities are only possible with express consent. You can revoke your consent at any time by sending us an informal e-mail. The legality of the data processing carried out prior to this revocation remains unaffected by the withdrawal of consent.
The right of recourse to the responsible regulatory authority
In the case of contravention of data privacy rules, the person concerned has the right of recourse to the responsible regulatory authority. The responsible regulatory authority in issues of data privacy law is the data protection officer of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following address: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to ask for the data we automatically process, based on your consent or in fulfilment of a contract, to be sent to you or a third party in a common, machine-readable format. Requests to transfer data to another responsible person will be honoured as long as it is technically possible.
For security reasons, this website uses SSL/TLS encryption to protect against the unauthorised transfer of confidential material, such as orders and requests that you send to us as website operators. You can recognise an encrypted connection because the address line in your browsers changes from “http://” to “https://” and a padlock symbol appears in your browser toolbar.
Whenever the SSL/TLS encryption is activated, the data you send to us cannot be read by third parties.
Disclosure, blocking and deleting your data
In the framework of the relevant legal regulations, you always have the right to unconditional disclosure about your stored personal data, its origin, recipients and the purpose of the data processing, including a right to the correction, blocking and deletion of this data. On this and other data protection issues, you can always contact us directly via the address in the legal notice at the bottom of the page.
Opting out of e-mail advertising
Any usage of contact data released within the framework of the duty to publish the imprint, through third parties, in order to send advertisements and information material not explicitly requested, is explicitly prohibited. The website operators reserve the right to take legal action if unrequested advertising material, e.g. spam e-mails, are sent.
3. Data collection on our website
Most of the cookies we use are so-called session cookies. They are automatically deleted at the end of your visit to the website. Other cookies remain saved on your device until you choose to delete them. These cookies allow us to recognise your browser the next time you visit the site.
You can configure your browser so that you are always informed about the creation of cookies, choose to allow them on a case-by-case basis, for certain cases of stop any use of them altogether, as well as activating automatic deletion of cookies each time you close your browser. Deactivation of cookies can limit the functionality of the website.
Cookies that are necessary to carry out electronic communication or that make possible certain user-desired functions (e.g. shopping basket function) are saved on the basis of Article 6(1) of the General Data Protection Regulation. The website operator has an legitimate interest in the saving of cookies to avoid technical errors and optimal provision of his/her services. The storage of other types of cookies (e.g. cookies for the analysis of surfing behaviour) will be dealt with separately in this data privacy statement.
Server Log Files
The website provider gather and automatically saves information in so-called server log files, which your browser automatically transfers to us. This includes:
- browser type and version
- operating system used
- referrer URL
- the host name of the accessing computer
- time of the server request
- IP address
This data are not collated with other data sources.
The basis for the data processing is article 6(1) of the General Data Protection Regulation (GDPR), which allows for the processing of data to perform a contract or measures required to enter into a contract.
Whenever you send us requests via the contact form, your details from the request form are saved by us, including the contact details you submit for the processing of your request and in case of follow-up questions. We do not pass on any of these details with your express consent.
The processing of the date submitted in the contact form therefore only takes place on the basis of your consent (Article 6(1) of GDPR). You can withdraw this consent at any time by sending us an informal message to this effect via e-mail. The legality of the data processing activities carried out prior to this revocation remains unaffected by the withdrawal of consent.
4. Analysis tools and advertising
This website uses the functionalities of the web analysis service Google Analytics. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics uses so-called cookies, text files that are saved on your computer and make it possible to analyse your use of the website. The information created by the cookie about your use of this website is generally transferred to a Google server in the USA and saved there.
The daving of Google Analytics cookies is carried out on the basis of Article 6(1) of the GDPR. The website operator has a legitimate interest in the analysis of user behaviour in order to optimise both their web offer and advertisement.
We have activated the IP anonymization function on this website. As such, in all Member States of the European Union and other signatories to the Agreement on the European Economic Area, Google shortens your IP address before its transfer to the USA. Only in exceptional cases is the full IP address first sent to a Google server in the USA and then shortened. On behalf of the operator of this website, Google uses this information to analyse your opinion of the website, to put together reports on the website activity and to carry out various other services for the website operator related to the website’s use and use of the internet. The IP address sent from your browser for Google Analytics is not linked to other Google data.
You can stop the cookies from being saved by configuring your browser software appropriately, however we would like to inform you that doing so may mean you are unable to use all functions of the website optimally. You can also stop Google from collecting and processing the data created by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following address: https://tools.google.com/dlpage/gaoptout?hl=en-GB.
Opting out of data collection
You can also stop Google Analytics from collecting your data by clicking on the following link. This will install an opt-out cookie stops further collection of your data during future visits to the website: Deactivate Google Analytics
You can find more information about the handling of user data by Google Analytics in the Google Data Privacy Statement: https://support.google.com/analytics/answer/6004245?hl=en.
Data processing contract
We have signed a data processing contract with Google and fully enforce the strict conditions of the German data protection authorities when using Google Analytics.
Google Analytics demographic indicators
This website uses Google Analytics’ “demographic characteristics” function. This makes it possible to create reports that include an indication of the age, sex and interests of the site user. This data originates from Google’s interest-based advertising as well as from visitor date from third parties. This data cannot be attributed to any single person. You can deactivate this function at any time in the display settings of your Google account, or even opt out of the collection of your data by Google Analytics as explained under Opting out of data collection.
Google Analytics Remarketing
Our websites use the Google Analytics Remarketing functions in combination with the functions of Google AdWords and Google DoubleClick, which work consistently across devices. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function makes it possible to link the ad target groups created by Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-related and personalised advert messaging adjusted to you, can be displayed on any of your devices (e.g. tablet or PC) regardless of your previous use and surfing behaviour.
To this end, if you have given the required consent, Google then links your web and app browsing history with your Google account. This makes it possible to see the same personalised advertising on all devices on which you are logged in to your Google account.
To support this function, Google Analytics collects users’ Google-authenticated IDs, which are temporarily linked with our Google Analytics data in order to define and create target groups for targeted advertising across several devices.
You can permanently opt out of cross-device remarketing/targeting by deactivating personalised advertising on your Google account at the following address: https://www.google.com/settings/ads/onweb/.
This data can only be collated in your Google account if you give give Google your consent. You can withdraw this consent at any point according to Article 6 (1) of the GDPR. If data processing activities, which are not merged in your Google account (e.g. because you don’t have a Google account or have opted out of the merging of your data) the collection of data is based on Article 6(1) of the GDPR. The legitimate interest arises from the website operator’s interest in anonymized analysis of website visitors for the purpose of advertising.
You can find further information and the data protection conditions in Google’s data privacy statement at https://www.google.com/policies/technologies/ads/.
We use “Google reCAPTCHA” (hereafter “reCAPTCHA”) on our websites. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
reCAPTCHA makes it possible to verify whether data input into our websites (e.g. on a contact form) is performed by a human or by an automatised programme. To do so, reCAPTCHA analyses the behaviour of the website user with various characteristics. This analysis begins automatically as soon as the website user enters the website. To performs its analysis, reCAPTCHA measures certain things (e.g. IP address, duration of the visit to the website or the user’s mouse movements). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses take place in the background. Website visitors are not notified that an analysis is taking place.
The data processing takes place on the basis of Article 6(1) of the GDPR. The website operator has a legitimate interest in protecting their web offers from abusive automatised spying and from spam.
You can find further information about Google reCAPTCHA and Google’s data privacy statement at the following addresses: https://www.google.com/intl/de/policies/privacy/ und https://www.google.com/recaptcha/intro/android.html.
If you wish to receive the newsletter offered on the website, we require your e-mail address as well as information, which allows us to verify that you are the owner of the given e-mail address and agree to received the newsletter. Any other data is only collected on a voluntary basis. This data is only used for distributing the requested information, and is not shared with third parties.
The processing of date submitted via the newsletter subscription form takes place entirely on the basis of your consent (Article 6(1) of the GDPR). Once granted, you can at any time withdraw your consent for us to save your data and e-mail address, as well as the right use it to send the newsletter by clicking on unsubscribe in the newsletter. The legality of the previously carried out data processing activities remains unaffected by the withdrawal of consent.
The data you submit to us for the purpose of receiving the newsletter is saved up until you unsubscribe from the newsletter, and is thereafter deleted. Data saved for other purposes (e.g. e-mail addresses for the membership section) are unaffected by this.
This website uses CleverReach for the distribution of newsletters. The service provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that makes it possible to organise and analyse newsletter distribution. The data you submit for the purpose of receiving the news letter (e.g. e-mail address) is saved on the CleverReach servers in Germany and/or Ireland.
The newsletter we send with CleverReach make it possible for us to analyse the behaviour of the recipients of the newsletter. This allows us, amongst other things, to analyse how many recipients have opened the newsletter message and often each of the links in the newsletter were clicked on. Thanks to so-called conversation tracking, it is also possible to analyse whether, after a click on a link, a pre-defined action takes place (e.g. purchase of a product on our website).You can find further information about data analysis by CleverReach newsletter at: https://www.cleverreach.com/en/features/reporting-tracking/.
The data processing takes place on the basis of your consent (Article 6(1) of the GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the previously carried out data processing activities is unaffected by the the withdrawal of consent.
If you wish to stop any analysis of your data by CleverReach, you have to unsubscribe from the newsletter. The appropriate link is included in every newsletter message. Furthermore you can also directly unsubscribe from the newsletter on the website.
The data you submit to us for the purpose of receiving the newsletter is saved up until you unsubscribe from the newsletter, and is thereafter deleted from our servers and from those of CleverReach. Data saved for other purposes (e.g. e-mail addresses for the membership section) are unaffected by this.
You can find more detail in the data privacy conditions of CleverReach at: https://www.cleverreach.com/en/privacy-policy/.
Contractual agreement on data processing
We have signed a data processing contract with CleverReach and fully enforce the strict conditions of the German data protection authorities when using CleverReach.
6. Plugins and Tools
Our websites include integrated plug-ins of the social network Facebook. The service provider is Facebook Inc., 1 HackerWay, Menlo Park, California 94025, USA. You can recognise the Facebook plug-ins from the Facebook logo or the “like button”on our site. You can find on overview about Facebook plug-ins here: https://developers.facebook.com/docs/plugins/.
Whenever you visit our sites, the plug-in creates a direct link between your browser and the Facebook server. Facebook thereby receives the information that you visited our site with your IP address.
When you click on the “like button” whilst you are logged into your Facebook account, you can can link the contents of our sites to your Facebook profile. This allows Facebook to attribute the site visit to your user account.
Please note that, as site operators, we have no information either about the content of the data transferred or its use. You can find further information on this topic in Facebook’s data privacy statement at https://www.facebook.com/privacy/explanation.
If you do not want Facebook to be able to connect your visit to our site to your Facebook user account, then please log out of your Facebook account.
Our website uses functions of the XING network. The service provider is XING AG, Dammtorstraße 29-32,20354 Hamburg, Deutschland. Each retrieval of one of our sites which contains the XING functions, creates a connection to XING servers.
To our knowledge, this does not result in personal data being saved. In particular, no IP address are saved and user behaviour is not analysed.
You can find further information about data protection and the XING share button in the XING data privacy statement at: https://www.xing.com/app/share?op=data_protection
Google Web Fonts
This site uses so-called Web Fonts, provided by Google, to ensure the consistent display of fonts on the site. When a site is retrieved, you browser loads the required fonts in your browser cache so that text and fonts are correctly displayed.
For this purpose, the browser you use has to make a connection to the Google servers. This informs Google that our website was visited via your IP address. Google WebFonts is used in the interest of consisted and attractive presentation of our online offers. This constitutes a legitimate interest in the spirit of Art 6(1) of the GDPR.
If your browser does not support Web Fonts, a standard font is used by your computer.
This website makes use of the maps service Google Maps through an API. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In order to used the function of Google Maps, it is necessary to have provided your IP address. This information is, as a rule, transferred to a Google server in the USA and saved there. The provider of this site has no influence over this data transfer.
Google Maps is used on the site to give an attractive representation of our online offers and to make it easier to find the sites we mention on the website. This constitutes a legitimate interest in the spirit of Art 6(1) of the GDPR.
You can find more information about the handling of user data in Google’s data privacy statement: https://www.google.de/intl/de/policies/privacy/.