Privacy & Cookie Policy

Privacy Policy

We take the protection of your personal data very seriously and handle it in accordance with the statutory provisions. With this data protection declaration, we provide you with the legally required information according to Art. 13 and 14 of the General Data Protection Regulation (GDPR) and explain the processing within the scope of our online offer and our services. We would also like to point out that data transmission on the Internet is not 100% secure and may have security gaps. This also depends on individual surfing behaviour and also on which technologies are already stored in your browser. You will also find additional information on the protection of your personal data in this privacy policy.

The controller within the meaning of Art. 4 No. 7 GDPR is:

German Interactive/Claudia Hildebrandt
Tweehiuzenweg 73/3
1200 Sint Lambrechs-Woluwe
Contact info@germaninteractive.eu

We are not required by law to appoint a data protection officer.

We are registered at the Banque Carrefour des Enterprises under the number: 1003.819.544;

you can find the online version of the registration at:

https://kbopub.economie.fgov.be/kbopub/zoeknummerform.html?nummer=1003819544&actionLu=Suche

and of our registration of the business name under:

https://kbopub.economie.fgov.be/kbopub/toonvestigingps.html?ondernemingsnummer=1003819544

Definitions

For the terms used in this privacy statement, we refer to the definitions in Article 4 of the GDPR. You can access the legal text in several languages under the following link on a legal page of the European Union:

https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32016R0679

General information

You have the option of contacting us by e-mail, and post. The information you provide will be treated confidentially by us and will not be passed on to third parties unless there is a legal justification for doing so. Processing only takes place if there is a legal basis for it. This may be on the basis of your consent (Art. 6 para. 1 lit. a GDPR), if this is contractually required (Art. 6 para. 1 lit. b GDPR) or if there is a legal obligation to do so (Art. 6 para. 1 lit. c GDPR). In exceptional cases, a legitimate interest of the data controller within the meaning of Art. 6 para. 1 lit. f GDPR comes into consideration, for example for the purposes of efficient office organisation and accounting through the use of certain tools and software. Data transfer to unsafe third countries therefore does not take place. The legal bases can also form the basis of the correspondence. In particular, (pre-)contractual measures within the meaning of Art. 6 para. 1 lit b. GDPR also come into consideration as a legal basis for the processing.

Where necessary, data protection agreements have been concluded with our hosting providers and the services used, which ensures compliance with European data protection regulations. However, the possibility of third parties gaining knowledge of your data when communicating via the Internet cannot be completely ruled out. In the event of sensitive information being transmitted, please contact us in advance to set up a protected format, such as e-mail or file encryption. The definition of sensitive data can be found in Art. 9 para. 1 GDPR.

We otherwise assume that there are no overriding interests worthy of protection on your part or the existence of sensitive information in the context of contractual communication. Personal data is mainly stored by us in accordance with legal, in particular commercial and tax law retention periods and then deleted. Exclusively automated decision-making or profiling does not take place.

Data processing on the website Server log files (web server)

When you visit our website, technically necessary data is processed which is required for the operation of the website as well as the security architecture. During communication between your browser and our web server, the following data is logged by default:

– Date and time of the request or page view – Name of the requested file
– Page from which the file was requested
– Access status

– Web browser and operating system used
– (Complete) IP address of the requesting computer – Amount of data transferred

In addition, the log file is used to evaluate system security and stability as well as for statistical purposes in anonymised form. The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f GDPR. The collected data is deleted as soon as the purpose of storage no longer applies and further storage is not necessary.

Web hosting

We have concluded a data protection agreement with our hosting provider Easyhost BV, Skaldenstraat 121, 9042 Ghent, Belgium, which ensures compliance with the European level of data protection (Art. 28 GDPR). The data processed when visiting the website is stored on a server within the EU in Belgium, and when using the web application tool/ebook on a server in London, United Kingdom. The United Kingdom is considered a safe third country in data protection by an adequacy decision in the EU. The use of the platform is in the legitimate economic interest of the controller pursuant to Art. 6 para. 1 lit. f GDPR to provide our services. Easyhost is also certified according to the information security standard ISO27001 and has a security level that meets the highest standards. Further information on data protection at Easyhost can be found at

https://www.easyhost.be/en/privacy-policy

Contact form

We use a contact form on our website that can be used to make product-related and other contact enquiries. Your name, e-mail address and free text details are processed via this form. This information is processed for the purposes of contacting you, addressing you personally and describing your enquiry. You have the option of providing optional information in this context. Insofar as (pre-)contractually relevant enquiries are concerned, the legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Optional information is processed voluntarily on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. The contact form as well as the website have a strong TLS encryption for secure data transmission.

Contract and payment

On our website you have the possibility to purchase products and services directly and to make use of them. For this purpose, we use an order form as well as a member area, whereby the contract and payment-relevant details are processed:

– Services booked/product bought
– Personal details (name, contact, billing address) – Optional order details
– Required payment- and bank data

The legal basis of the processing is Art. 6 para. 1 lit. b GDPR for the purposes of contract execution. Payment processing is carried out via Stripe or the respective desired payment method. The data protection provisions relevant to the payment can be found in addition in the details of the respective payment provider on the payment page. Via the user administration, we also have the possibility to view the user status and to manage and regulate the order (e.g. the number of devices that can be used for the product). On the one hand, this is contractually required and, on the other hand, we have a legitimate interest in protecting ourselves against fraudulent activities and limiting access in this case.  The payment processors may transfer data outside of the UK/EU to the USA, where these transfers take place, the processor will abide by the Standard Contractual Clauses (“SCCs”) approved by the European Commission which have been incorporated into the processor’s agreements.

Use of cookies

Cookies are used on our website. On the one hand, these are used as session and shopping basket cookies to ensure the functionality and performance of our website and the online shop. These are text files that are stored in your device. They are automatically deleted after you close your browser. Other cookies are stored on your device until they are deleted or the storage period expires. These cookies make it possible, for example, to recognise your browser on your next visit, to carry out an analysis of website usage and to optimise our website in a user-friendly way. These processing operations are based on the consent of the user of the services described. When visiting the website, you have the option of making a selection for this via the cookie settings. In addition, you have the option of blocking or individually configuring the use of cookies and comparable (tracking) technologies via your browser settings.

Other Tools & services used

Google services

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. (“Google”). Google Analytics uses cookies, which enable an analysis of your use of the website. In addition to the IP address, the transmission of further personal data to the USA cannot be ruled out, as Google uses further technologies such as a personal identifier to which your data can be associated, even when IP anonymisation is active.

We would like to point out that since the Schrems II decision of the European Court of Justice (ECJ), the USA currently does not have an adequate level of data protection and the use only takes place with your consent pursuant to Art. 6 para. lit. a of the GDPR through the cookie settings. An adequacy decision for the USA, which would ensure a comparable level of data protection, is currently pending (so-called “Privacy Shield 2.0”).

Google uses the collected data to evaluate the usage, to create reports about activities on the website and to provide further analysis services for the operator of the website. Further information can be found in Google’s privacy policy: http://www.google.com/ analytics/terms/de.html and at https://www.google.de/intl/de/policies/.

We also use the Google Tag Manager. This is a tool for websites to load further tools by means of so-called “tags”, which are to be understood as program logic and code. Here too, your IP address is transmitted to a server in the USA, so we only use this with your consent. Please note that we have no further influence on the processing, evaluation and aggregation of data by Google in the USA.

Kotobee

For the provision of eBooks as a WebApp as well as the administration of the eBooks, we use software from Kotobee, Str 10, 5th District October City, Cairo, Egypt. In this case, the registered name and e-mail address, provided the moment of purchase, are transferred to the management software via an API between Stripe and Kotobee, and processed. Kotobee stores personal data on servers in London, United Kingdom, which is considered a safe third country for data protection by an adequacy decision in the EU. A data protection agreement has been concluded with the provider. You can find more information at https://www.kotobee.com/privacy.

Data Retention

We only store your data for as long as we need to for business reasons or legal obligations.  Where there is a legal obligation such as financial transactions, these are stored for 10 years.  Email and web contact form enquiries will be stored for 3 years.  Data required to access the web portal or where you have consented to marketing will be stored until you ask us to delete this.  Please note that if we delete your email address you will no longer be able to access the web portal.

Links to Other Web Sites

Our services may contain links to other websites not controlled or operated by us.  These links do not imply that we endorse these third-party sites. We recommend reviewing those sites directly for information on their privacy policies.

Children

We do not knowingly collect Personal Data from children under the age of 13. If you are under the age of 13, please do not submit any Personal Data through our Services. 

Data subject rights

The applicable data protection law provides for comprehensive data subject rights in the GDPR:

Pursuant to Art. 15 of the GDPR, you have the right to information about the data we have stored about you. This includes, in particular, information about the purposes of processing, data categories and categories of recipients/disclosure to third parties as well as the storage period.

In accordance with Article 16 of the GDPR, you also have the right to demand the immediate correction of incorrect or incomplete data as well as a right to deletion in accordance with Article 17 of the GDPR, if the purpose of the storage no longer applies or data is processed unlawfully. This may require a revocation of consent or the exercise of a right to object. Data will be deleted insofar as no legitimate interests or legal obligations prevent deletion.

There is also a right to restriction of processing pursuant to Art. 18 of the GDPR if the accuracy or lawfulness of the processing on your part is disputed or is actually given. You also have the right, pursuant to Art. 20 of the DGDPR, to receive your personal data in a structured, common and machine-readable format or to request that it be transferred to another controller. You also have the right to revoke your consent at any time with effect for the future pursuant to Art. 7 para. of the GDPR or to object to processing pursuant to Art. 21 of the GDPR if there are special circumstances on your part that speak against processing. The right of revocation or objection also applies in particular to marketing measures that are either carried out on the basis of consent (revocation) or on the basis of legitimate interest (objection).

In addition, you have the right to complain to the competent data protection supervisory authority in accordance with Article 77 of the GDPR if you believe that the controller is violating the protection of personal data. The competent supervisory authority is the supervisory authority at the registered office of the controller. Pursuant to Art. 22 GDPR, you have the right not to be exclusively subject to automated decision-making, including profiling. We would like to point out that the controller does not carry out any automated decision-making or profiling.

Subject to change

Our privacy policy is updated regularly and the processing operations are checked for compliance with the current legal provisions and data protection requirements. We therefore reserve the right to adapt it from time to time, so that the information contained does not necessarily correspond to the current status. We therefore ask you to consult our privacy policy at regular intervals and to contact us in advance if you have any questions about the processing of your data. To exercise your rights, you can contact us by post or at info@germaninteractive.eu at any time.

Privacy Policy last updated: 16-May-2024