PRIVACY POLICY
about the processing of personal data (external)

Ekornes AS, and its subsidiaries within the Group (hereinafter collectively "Ekornes") are responsible for complying with the provisions of the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of data ("GDPR"), as well as the legislation of the country related to privacy and adjacent regulations.
 
With this Privacy Policy, we want to ensure that you receive adequate information about the collection and processing of your personal data, including such information that we are required to inform you of under applicable data protection regulations, including EU Regulation No. 2016/679 of the General Data Protection Regulation (GDPR).
 
Where the masculine form is used, it is used in the absence of a gender-neutral wording for reasons of readability. The masculine formula is valid for all genders and is not intended to be restrictive.
 

1. Responsible for the processing of personal data

Ekornes is the data controller, i.e. decides why and how the personal data should be processed, for the processing discussed below.

The contact details of the data controller are:
Address: Industrivegen 1, 6222 Ikornnes, Norway
E-post: Dataprotection.no@ekornes.com
Telephone: +47 7025 52 00
Organisation number: 964976430

2. Contact information – Data Protection Officer

You can contact our Data Protection Officer directly at any time with regard to questions regarding the collection, processing and use of personal data.

The contact details of the Data Protection Officer are:
Address: Industrivegen 1, 6222 Ikornnes, Norway
E-post: Dataprotection.no@ekornes.com
Telephone: +47 7025 52 00

3. General information about data processing

3.1 Scope of processing of personal data
In principle, we only process your personal data to the extent this is necessary to provide a functional website and our content and services. The processing of your personal data regularly takes place only with your consent. An exception applies in such cases where it is not possible to obtain prior consent for actual reasons and the processing of the data is permitted by legal provisions.

Data processing at Ekornes can mainly be divided into three categories:
 - For purchase and sale, all data required for the performance of a contract with Ekornes will be processed. If external service providers are also involved in the processing of the contract, such as logistics companies or credit bureaus, your data will be passed on to them to the extent necessary.
 - In addition to buying and selling, we also use the data collected from you for the purpose of informing you from time to time about new offers and promotions.
 - When you access the Ekornes website, different parts of the information are exchanged between your device and our server. This may also be personal data. The information collected in this way is used, among other things, to optimize our website or to display advertisements in the browser of your device.
 
3.2 Legal basis for processing personal data
To the extent that we obtain the consent of the data subject for the processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This also applies to treatment operations that are necessary to carry out pre-contractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation to which our company is subject, Article 6 (1) (c) GDPR acts as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 paragraph 1 letter d serves as the legal basis.

If the processing is necessary for the performance of a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the person concerned do not outweigh the first interest, Article 6 paragraph 1 lit. f GDPR serves as the legal basis for the processing.

3.3 Data Deletion and Storage Duration
The personal data of the person concerned will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this is stipulated by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
 
3.4 U.S. Data Transfer Notice
Our website contains tools from companies based in the USA. When these tools are active, your personal data may be transferred to US servers of the respective companies. We would like to point out that the United States is not a safe third country under EU data protection legislation. U.S. companies are obliged to disclose personal data to the security authorities without you being able to take legal action against this. It cannot therefore be ruled out that the US authorities will process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.
 

4 Provision of the website and creation of log files

4.1 Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer of the computer being accessed.
The following data is collected here:
(1) Information about your browser type and version
(2) The operating system you are using
(3) The name of your internet service provider
(4) IP address of the Internet-enabled device requesting
(5) Date and time of access
(6) The website from which our website was accessed

The data is also stored in the log files of our system. This data is not stored together with other personal data. 

4.2 Legal basis for data processing

The legal basis for the temporary storage of the data and log files is Article 6 (1) (f) GDPR.
 
4.3 Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the delivery of the site to your computer. For this purpose, the IP address must be stored for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

Our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR also lies in these purposes.

4.4 Duration of storage
The data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. With regard to the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case no later than after seven days. Storage beyond this is possible. In this case, the IP addresses are deleted or alienated so that it is no longer possible to assign the caller client.
 
4.5 Possibility of objection and elimination
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection.

5. Use of Cookies

5.1 Description and scope of data processing
Our website uses cookies. Cookies are text files that are stored in your browser or by the browser on your computer system. If you call up a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that allows the browser to be clearly identified when the website is called up again.
 
We use cookies to make our website more user-friendly. Some elements of our website require that the browser calling can be identified even after a page change.
 
We also use cookies on our website, which enable an analysis of your surfing behavior.
When you visit our website, you will be informed about the use of cookies for analysis and marketing purposes and your consent to the processing of the personal data used in this context will be obtained.
 
5.2 Legal basis for data processing
The legal basis for processing personal data using technically necessary cookies is Article 6 (1) (f) GDPR.
 
The legal basis for the processing of personal data using cookies for analysis and marketing purposes as well as functional purposes is Article 6 para 1 letter a GDPR if you have given your consent in this regard.
 
5.3 Purpose of data processing
The purpose of using technically necessary cookies is to simplify the use of websites for you. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
 
Our legitimate interest in the processing of personal data in accordance with Article 6 (1) (f) GDPR also lies in these purposes.
We require technically necessary cookies for the following applications:
(1) Cart
(2) Acceptance of language settings
(3) Remember keywords
The data collected by technically necessary cookies is not used to create profiles.
Analytics cookies are used to improve the quality of our website and content. Through the analysis cookies, we learn how the website is used and can thus continuously optimize our offer.
 
The advertising cookies we use serve to show you interest-based advertising. When you visit another website, your browser's cookie will be recognized and you will be shown selected advertising based on the information stored in that cookie.
 
Functional cookies are used for the purpose of providing extended functions on our website. These cookies may be set by us or by third parties whose services we use on our website.
 
5.4 Storage time, possibility of objection and removal
Cookies are stored on your computer and transferred to our website. Therefore, you also have full control over the use of cookies. By changing the settings in your browser, you can disable or limit the transmission of cookies. Cookies that are already stored can be deleted at any time. This can also be done automatically. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.
 
Regardless of whether the processing is based on consent or legal permission, you have the option to revoke your consent or object to the processing of your data at any time with cookie technologies.
 
Your revocation does not affect the lawfulness of the processing carried out on the basis of your consent up to the time of withdrawal.
 
You can declare your objection by using your browser settings, for example by disabling the use of cookies (which may also limit the functionality of our online offer). You can withdraw your consent or configure your settings for the cookies used on our website by clicking on the following link: Adjust your cookie settings
You can find detailed information about the cookies we use on https://www.stressless.com/global/terms-and-conditions/cookies
 
 
 

6. Entering into, fulfilling or terminating a contract

6.1 Data processing at conclusion of contract
Ekornes' activity is the distribution and sale of Stressless brands. In this context, we process the data required for the performance of a contract or to carry out pre-contractual measures (e.g. product purchase, warranty registration, request for fabric and leather samples, catalogue request) with you.

These include, for example:
Message, title, first name, last name
Billing and shipping address
Email adress
Billing and payment data
Birthdate
Telephone number
 
The legal basis for this is Article 6 para. 1 letter b GDPR, i.e. you provide us with the data on the basis of the contractual relationship between you and us. In order to process your e-mail address for online orders, certain countries are required to electronically confirm receipt of your order. Fill inn the applicable country’s legislation. The legal basis for this is Article 6 (1) (c) GDPR. If we do not use your contact details for advertising purposes, we will store the data collected for contract processing at least until the statutory or possible contractual warranty and warranty rights have expired.
 
For the purpose of processing the purchase contract, we cooperate with logistics companies. The following data may be transferred to these logistics companies ordered by us for the purpose of delivering the ordered goods or for advertising them: Information about your delivery address (first name, last name, postal address) as well as email address and telephone number. The logistics company will contact you in advance of delivery to inform you of the delivery time or to coordinate the details of the delivery with you.
 
6.2 Identity, creditworthiness and transfer to credit bureaus
If necessary, we check your identity using information provided by service providers. The legal basis for this is Article 6 paragraph 1 letter b and letter f GDPR. The authorisation to do so is due to the protection of your identity and the avoidance of fraud at our expense. The circumstances and the result of our request will be stored in your customer account or guest account for the duration of the contractual relationship.
 
During the ordering process, we also check your creditworthiness if you choose the payment method "on account". For this purpose, we transfer the following types of data to so-called credit bureaus that cooperate with us: name, address, date of birth. The legal basis for this is Article 6 (1) (f) GDPR. The legitimate interest required hereinafter is a result of our interest in minimising the risk of debit default associated with these payment methods. The fact and the result of our request will be stored in your customer account for the duration of the contractual relationship.
 
If you have already made a purchase with us, the data we have stored about you can be supplemented with so-called point values. Scoring is making a forecast of future events based on collected information and experiences from the past. Such processing is based on Article 6 (1) (f) GDPR. The preparation of such forecasts is to be regarded as a legitimate interest in the sense of the said regulation. Based on the data stored about you, an assignment is made to statistical groups of people who had similar entries previously. The underlying procedure used is a well-founded, proven, mathematical-statistical method for predicting risk probabilities.
 
In the event of a delay in payment, we reserve the right to transfer the necessary data to a company that is tasked with asserting the claim if the other legal requirements are met. The legal basis for this is both Article 6 (1) (b) and Article 6 (1) (f) GDPR. Assertion of a contractual claim is to be regarded as a legitimate interest in the sense of the other provision. If the other legal requirements are met, we also transmit information about the delay in payment or any bad receivables to credit bureaus that cooperate with us. The legal basis for this is Article 6 (1) (f) GDPR. The legitimate interest required here is a result of our and third parties' interest in reducing contractual risk for future contracts.
 

7. Data processing for advertising purposes

7.1 Introduction
The following statements refer to the processing of personal data for advertising purposes. The GDPR declares such data processing on the basis of Article 6 para. 1 lit f GDPR as fundamental conceivable and as a legitimate interest. The duration of data storage for advertising purposes does not follow any rigid principles and is based on the question of whether storage is necessary for advertising purposes.
 
7.2 Promotional purposes for Ekornes and third parties
If you have entered into a contract with us, we will treat you as a customer. In this case, we process your postal contact information without a specific consent to send you information about goods and services in this way.
We process your e-mail address, if received from you, to send you information about our own, similar goods or services outside the existence of a specific consent. The legal basis for sending the newsletter as a result of the sale of goods or services appears from the applicable country's legislation. Fill in the applicable country’s legislation.
 
7.3 Interest-Based Advertising
To ensure that you only receive advertising information that is of interest to you, we categorize and add additional information to your customer profile. Both statistical information and information about you (e.g. basic data of your customer profile) are used for this purpose. The goal is to send you advertising that is based solely on your actual or supposed needs and not to bother you with useless advertising.


7.4 Right to object
You can object to data processing at any time for the aforementioned purposes free of charge, separately for the respective communication channel and with effect for the future. An e-mail or a postal letter to the responsible party is sufficient for this.
 
If you object, the affected contact address will be blocked for further processing of ad data. Please note that in exceptional cases, promotional material may still be sent temporarily even after receipt of your objection. This is technically due to the required delivery time for ads and does not mean that we will not implement your objection. We thank you for your understanding in this regard.

7.5 Sending newsletters
On our website we offer you the opportunity to sign up for our newsletter. In order to be sure that no mistakes were made when entering the e-mail address, we use the so-called double opt-in procedure. This means: After entering your email address in the registration field, we will send you a confirmation link. Only when you click on this confirmation link will your email address be added to our email list. Your electronic contact data is processed at this time solely on the basis of your consent in accordance with Article 6 (1) (a) GDPR. You can revoke the consent you have given in this way at any time with effect for the future. A short notification email is sufficient for this, or you can click on the "unsubscribe" button at the end of each newsletter.
 

8. Contact

We offer visitors to our website the opportunity to contact us via a contact form or by email. We use the information you provide via the contact form or via email (mandatory information is marked with an asterisk) solely for the purpose of processing your request. This is done on the basis of Art. 6 para. 1 lit f GDPR. Proper handling of your concerns is to be regarded as a legitimate interest under the GDPR. If you contact us in connection with a contractual relationship between you and us, Art. 6 (1) (b) GDPR, i.e. this contractual relationship, also the legal basis for data processing. Provided that there are no legal retention periods, the data provided will be deleted immediately after the purpose no longer applies.
 

9. Participation in competitions and surveys

From time to time, we may give you the opportunity to participate in competitions and surveys, for example on our website, via our social media channels (including Facebook, Instagram, Pinterest), from our newsletter or by post. If you choose to participate, we will ask you to provide us with certain information. Such data depends on the particular competition, competition or survey.
 
It will only be passed on to third parties if this is necessary to process the competition (e.g. sending the prize via a logistics company), the competition or the survey (e.g. sending a free product as a thank you for participating).
 
Unless otherwise specified in the respective competitions, competitions or surveys, or if you have not given us further express consent, the personal data you provide to us as part of your participation will only be used to process the competitions (e.g. determination of winners, notification of winners, dispatch of prize), competition or survey. The legal basis for data processing is basically the performance of the legal relationship pursuant to Article 6 paragraph 1 letter b GDPR, which arises between you and us with your participation. If a declaration of consent is submitted, Article 6 (1) (a) GDPR is the legal basis for data processing based on the consent.
 
The data will be deleted as soon as they are no longer needed to achieve the purpose for which they were collected. For the personal data, this is the case when the competition, competition or survey has ended.
 
In the case of non-cash prizes, the data of the winners will be kept during the statutory warranty requirements in order to arrange for repair or exchange in the event of a defect.
 
Participants have the opportunity to revoke their consent to the processing of personal data at any time with effect for the future.
 
Entrants also have the option to withdraw their consent to the terms of participation at any time during a contest, contest or survey. But further participation is then no longer possible.
 

10. How we share your personal information with others

In order to make our services available to you, to provide you with the services and support you request, and to run our business in general, we need to share your personal data with Ekornes AS and other members of the Ekornes Group and third parties such as B. IT suppliers, marketing agencies, suppliers of logistics services, payment service providers, etc.
 
When we engage external data processors to process your personal data on our behalf, we require them to only process your personal data in accordance with our instructions. We also require external data processors to sign appropriate contracts that provide adequate safeguards to implement appropriate technical and organizational measures in a manner that data processing meets the requirements of the applicable data protection regulation and ensures adequate protection of your rights.
 
In the event that we disclose your personal data to third parties who do not act as data processors under our management but as independent data controllers, we will do our best to ensure that they are reliable and have implemented appropriate technical and organisational measures to protect your data that they assure us of clear obligations to comply with applicable data protection provisions and that they will not use the personal data they receive from us for purposes other than providing agreed services and for statistical analysis in anonymous form. 

11. Blog

11.1 Comment function on the blog
You have the opportunity to leave individual comments on individual blog posts on a blog, which can be found on the website of the data controller. A blog is a portal maintained on a website, usually open to the public, where one or more people called bloggers or online bloggers can post articles or write down thoughts in so-called blog posts. Your blog posts can usually be commented on by third parties.
 
If a data subject leaves a comment on the blog published on this website, information about the time the comment was entered, and the username (pseudonym) chosen by the data subject will be stored and published in addition to the comments made by the data subject. Moreover, the IP address assigned by the Internet service provider (ISP) of the data subject is also logged. The IP address is stored for security reasons and in case the person violates the rights of third parties or posts illegal content by submitting a comment. The storage of these personal data is therefore in the controller's own interest, so that he can exempt himself in the event of a breach of the law.This collected personal data will not be passed on to third parties unless such transfer is required by law or serves the legal defense of the controller.

11.2 Subscription to comments on the blog
The comments in the blog can usually be subscribed to by third parties. In particular, it is possible for a commenter to subscribe to the comments that follow their comment on a particular blog post.
If a data subject decides to subscribe to comments, the data controller sends an automatic confirmation email to check in the double opt-in procedure whether the owner of the provided e-mail address is really responsible for this option. The option to subscribe to comments can be terminated at any time. If consent is given, the legal basis for processing the data is Article 6 (1) (a) GDPR.

12. Analysis tools

12.1 Introduction
The legal basis for processing personal data described here is your consent in accordance with Article 6 (1) (a) GDPR.

You can withdraw your consent or configure your settings for the cookies used on our website by clicking on the following link: Adjust your cookie settings.

12.2 Google Analytics
We use Google Analytics for needs-based design and continuous optimization of our website. In the European Economic Area (EEA) and Switzerland, Google services are offered by:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").
In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
- browser type/version,
- operating system used,
- referral URL (the previously visited page),
- the hostname of the computer being accessed (IP address),
- time of server request, is transmitted to a Google server and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for market research and needs-based design of these websites. This information may also be transferred to third parties if this is required by law or if third parties process this data on our behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (IP masking).
 
You can prevent the installation of cookies by setting your browser software; accordingly. However, we would like to point out to you that in this case not all functions of this website can be fully used.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (https://tools).google.com/dlpage/gaoptout?hl=no).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection of data by Google Analytics by clicking on this link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.

Further information on data protection in relation to Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

12.3 Google Awords Remarketing
Our website uses the Google Adwords service. Google AdWords is an online advertising program from Google. With the remarketing function, we can present visitors to our website on other websites within the Google display network (on Google itself, so-called "Google ads" or on other websites) ads based on their interests.

We also use Google conversion tracking to statistically record the use of our website and to evaluate it for you in order to optimize our website. Google Adwords places a cookie on your computer if you have reached our website via a Google ad.

These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of the Adwords customer's website and the cookie has not yet expired, Google and the customer may recognize that you clicked on the ad and were redirected to that page.

Each AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of Adwords customers. The information collected using the conversion cookie is used to create conversion statistics for Adwords customers who have opted in to conversion tracking. Adwords customers are informed about the total number of visitors who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies visitors.

If you do not wish to participate in the tracking process, you can also refuse the setting of a cookie required for this – for example, via a browser setting that generally disables automatic setting of cookies. You can also disable conversion tracking cookies.

12.4 Facebook Custom Audience/ Conversion using the pixel process
We use "Facebook Pixel" on our website, a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook").

We use the Facebook pixel for remarketing purposes to be able to contact you again within 180 days. This allows you to be shown interest-based ads ("Facebook ads") when you visit the social network "Facebook" or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our website or offers more interesting to you.

In addition, we would like to use the Facebook pixel to ensure that our Facebook ads, so-called "Facebook Ads", are only shown to those Facebook users who have visited our website, in particular those who are interested in our online offer or in certain topics or products have shown. Facebook pixel enables you to check if you have been redirected to our website after clicking on our Facebook ads. Facebook Pixel uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your browser on the end device.

If you have a Facebook account and are registered, Facebook can assign the visit to your account. The data collected about you is anonymous to us, so we cannot draw any conclusions about your identity. However, this data can be linked by Facebook to your account there. We have no influence on the scope and further use of data collected by Facebook through the use of Facebook pixels. Even if you are not registered with Facebook or have not logged in, there is a possibility that Facebook will find out and store your IP address and any other identification functions.
We use Facebook pixels for marketing and optimization purposes, in particular to place relevant and interesting ads on Facebook and thus improve our offer, make it more interesting for you and avoid annoying ads. This is also our legitimate interest in processing the above data. You can find more information about Facebook's collection and use of data and about your rights in this regard and options to protect your privacy in Facebook's data protection information on https://www.facebook.com/about/privacy/.
 
To disable the "Facebook pixel", please click here: Disable Facebook tracking.

12.5 Pinterest conversion tracking
Our website uses conversion tracking technology from the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), which enables us to offer website visitors who have already signed up for our website and content. /offers and are Pinterest members to show ads and offers relevant to them on Pinterest. For this purpose, a so-called conversion tracking pixel from Pinterest is integrated into our pages, via which Pinterest is informed when you visit our website that you have visited our website and which parts of our offer you are interested in.
 
You can object to the collection of data for the display of interest-based advertising on Pinterest at any time in your Pinterest account settings on https://www.pinterest.com/settings (where under "Personalization", use the "Information" from our partners" button to Disable recommendations and ads on Pinterest better tailored to you") or under https://help.pinterest.com/en/article/personalization-and-data#info-ad (where checked box under "Disable" personalization").
 

13. Social media plugins

13.1 Introduction
We use social plugins from social networks on our website on the basis of Article 6 paragraph 1 sentence 1 lit. f GDPR to make our company better known. The underlying advertising purpose is to be regarded as a legitimate interest under the GDPR. Responsibility for data protection compliant operation shall be guaranteed by their respective suppliers.

13.2 Facebook
Facebook social media plugins are used on our website to make their use more personal. Facebook is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser, which integrates it into the website.

By integrating the plugin, Facebook receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Facebook account or are not currently logged into Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server and stored there.

If you are logged in to Facebook, Facebook can assign your visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and shown to your Facebook friends.

Facebook may use this information for advertising, market research and needs-based design of the Facebook pages. For this purpose, usage, interest and relationship profiles are created by Facebook, e.g. Facebook. B. to evaluate your use of our website with respect to the advertisements displayed to you on Facebook, to inform other Facebook users about your activities on our website and to provide other services related to the use of Facebook.

If you do not want Facebook to link the data collected through our website to your Facebook account, you must log out of Facebook before visiting our website.

The purpose and scope of the data collection and Facebook's further processing and use of the data as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's data protection information (https://www.facebook.com/about/privacy/).

13.3 Youtube
Our website uses plugins from the Google-powered YouTube website. In the European Economic Area (EEA) and Switzerland, Google services are offered by:

Google Ireland Limited.

If you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers will be established. The YouTube server is informed which of our pages you have visited.
If you're signed into your YouTube account, you allow YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. YouTube is used in the interest of an attractive presentation of our online offers. Further information on the handling of user data can be found in YouTube's data protection declaration at: https://www.google.en/intl/en/policies/privacy.

13.4 Instagram
So-called social plugins ("plugins") from Instagram are also used on our website. The Instagram Service is one of the Facebook Products provided by Facebook Ireland Limited. The plugins are branded with an Instagram logo, for example, in the form of an "Instagram camera".

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transferred directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page on our website, even if you do not have an Instagram profile or are not currently logged into Instagram.

This information (including your IP address) is transmitted directly from your browser to an Instagram server and stored there. If you are logged into Instagram, Instagram can immediately assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram" button, this information is also transmitted directly to an Instagram server and stored there. The information will also be published on your Instagram account and displayed to your contacts there.

If you do not want Instagram to directly assign the data collected through our website to your Instagram account, you must log out of Instagram before visiting our website. For more information, see Instagram's privacy policy (https://help.instagram.com/155833707900388).

13.5 Pinterest

We also use social plugins from the social network Pinterest on our website, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). If you call a page containing such a plugin, your browser establishes a direct connection to the Pinterest servers. The plugin transmits log data to the Pinterest server. This log data may include your IP address, the address of the web pages visited that also contain Pinterest features, browser type and settings, the date and time of your request, how you use Pinterest, and cookies.

Further information on the purpose, scope and further processing and use of your data by Pinterest, as well as your rights in this regard and options to protect your privacy, can be found in Pinterest's data protection information (https://help.pinterest.com/en/guide/all-about-pinterest)

14. Other integration of third-party services and content

14.1 Introduction
The legal basis for processing personal data described here is your consent in accordance with Article 6 (1) (a) GDPR.

You can revoke your consent or configure your settings for the cookies used on our website by clicking on the following link:
Adjust your cookie settings:

14.2 Google Maps

Our website uses the Google Maps map service via an API. In the European Economic Area (EEA) and Switzerland, Google services are offered by:
Google Ireland Limited (hereinafter referred to as "Google").

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server and stored there. The provider of this website has no influence on this data transfer. Google Maps is used in the interest of an attractive presentation of our online offers and to make it easier to find the places we have indicated on the website. You can find more information on the handling of user data in Google's data protection declaration: https://policies.google.com/privacy.

14.3 Vimeo
We integrate plugins from the Vimeo video portal on our website. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Vimeo servers. The content of the plugin is transmitted directly to your browser by Vimeo and integrated into the page. Through this integration, Vimeo receives the information that your browser has opened the corresponding page on our website. If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account. The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your rights in this regard and setting options to protect your privacy can be found in Vimeo's data protection information: https://vimeo.com/privacy.

15. Online presence in social media

15.1 Facebook Fansite
We operate a fan page on the social network Facebook Inc., 1601 Willow Road, Menlo Park, California, 94025, USA ("Facebook") with the joint responsibility to communicate with interested parties and followers and whether our products and services inform. For customers from the European Economic Area and Switzerland, Facebook Products are offered by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

In doing so, we may receive statistics from Facebook about the use of our fan page (e.g., information about the number, name, interactions, e.g., likes or comments, as well as summarized demographic and other information or statistics based on certain parameters about our company and the offerings on our fan page, which help us learn about interactions with our website) received from Facebook/Fanpage users. You can find more detailed information about the type and scope of these statistics in the Facebook Page statistics notes and about their respective responsibilities in the Facebook Page Insights Addendum. The legal basis for this data processing is Art. 6 Article 1 lit f GDPR based on our aforementioned legitimate interest.

We have no influence on data that Facebook processes at its own risk in accordance with Facebook's Terms of Use. However, we would like to point out that when you visit your fan page, data from your usage behavior will be transmitted from Facebook and your fan page to Facebook. Facebook itself processes the above information for the purposes of compiling detailed statistics and for its own market research and advertising purposes, over which we have no control. According to Facebook, the data collected is also transmitted to the United States and other third countries. You can find more information about this in Facebook's data protection information.

Insofar as we hold personal data from you when using the Fansite, you are entitled to the rights specified in this data protection statement. If you also want to assert rights against Facebook, the easiest way to do this is to contact Facebook directly. Facebook knows the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing and may implement appropriate measures upon request if you exercise your rights. We will be happy to support you in asserting your rights as far as we can and will forward your inquiries to Facebook.
 
15.2 Instagram
We also have a profile on Instagram. The provider of this service is Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

We have entered into an agreement on joint processing with Facebook. This agreement defines which data processing operations we or Facebook are responsible for when you visit our Facebook page. You can view this Agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

The legal basis for our presence in social media on Instagram is Art. 6 Article 1 lit f GDPR based on our legitimate interest in the greatest possible presence on the Internet.

Facebook Ireland Ltd. processes (personal) data when using Facebook products – including when visiting our Instagram page, and also from people who are not registered with any of the Facebook services. Facebook describes what (personal) data this is in detail, how, for what purposes and on what legal basis it is processed in its Data Protection Policy, which applies to all Facebook Products. There you can also find information on how to contact Facebook and how to set up ads, cookies, etc. The data may be transferred to countries outside the European Union.

You can find the link to Instagram's privacy policy here: Instagram's privacy policy.
 
15.3 Other online presences
We maintain other online social network presences to communicate with customers and interested parties and to provide information about our products and services.

Your data is usually processed for market research and advertising purposes. In this way, usage profiles can be created based on your interests. For this purpose, cookies and other identifiers will be stored on your computer. On the basis of these usage profiles, for example, advertisements are then placed in the social networks, but also on third-party websites. When you use social networks, your personal data may be processed outside the European Economic Area. The legal basis for data processing is Art. 6 para. 1 S. 1 f GDPR, based on our legitimate interest in effective user information and communication with users. The legal basis for the data processing carried out by the social networks under their own responsibility can be found in the data protection information of the respective social network. Under the links below, you will also receive further information about the respective data processing and the possibilities for objection.

15.4 Pinterest

Pinterest is operated by Pinterest Inc., 651 Brannan Street, San Francisco, CA 94107, USA ("Pinterest"). For residents of the EEA, the data controller is Pinterest Europe Ltd. Palmerston House, 2nd floor Fenian Street, Dublin 2, Ireland. The link to Pinterest's privacy policy can be found here: Pinterest Privacy Policy.

15.5 Youtube

Youtube drives av Google Ireland Limited, Gorden House, Barrow Street, Dublin 4 Ireland. The link to Google's privacy policy can be found here: Google's privacy policy.

We would like to point out that data protection requests can be made most effectively with the respective provider of the social network, since only these providers have access to the data and can take appropriate measures directly. 

16. Security

When you visit our website, we use the widespread Secure Socket Layer (SSL) method (Is this used in all countries?) in conjunction with the highest level of encryption supported by your browser. You can see if an individual page of our website is transmitted in encrypted form by the closed representation of the key or the lock symbol in the lower status bar of your browser. We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.
 

17. The rights of the data subject

17.1 Introduction If personal data is processed by you, you are the data subject under the GDPR and you have the following rights vis-à-vis the controller.
 
17.2 Right to information
According to Art. 15 GDPR you have the right to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients to whom your data was or will be disclosed, the planned storage period, the existence of the right to rectification, erasure, restriction of processing or objection, the existence of a right to complain, the origin of your data, if they have not been collected from us, and the existence of automated decision-making including profiling and, if necessary, meaningful information about their details.
 
17.3 Right to rectification
According to Art. 16 GDPR you have the right to immediately request the rectification of incorrect or incomplete personal data stored by us.
 
17.4 Right to erasure
In accordance with Art. 17 GDPR you have the right to request the erasure of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest or to assert the exercise or defence of legal claims is necessary.
 
17.5 Right to restriction of processing
According to Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if you contest the accuracy of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need them to assert, exercise or defend legal claims, or you have objected to the processing according to Art. 21 GDPR.

17.6 Right to information
If you have claimed the right of rectification, erasure or restriction of processing against the controller, he is obliged in accordance with applicable country's personal protection law (fill in) to inform all recipients to whom the personal data concerning you have been disclosed about this rectification or erasure of data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

17.7 Right to data portability
In accordance with Art. 20 GDPR you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another responsible person.

17.8 Right to object
In accordance with Article 21 GDPR, you have the right, on grounds arising from your particular situation to object at any time to the processing of your personal data, which is based on Article 6 para. 1 lit e or f GDPR; This also applies to profiling based on these provisions.

The controller no longer processes the personal data relating to you unless he can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; This also applies to profiling to the extent that it is linked to such direct advertising.
If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

The objection can be made informally.

17.9 Right to revoke the declaration of consent under data protection law
In accordance with Article 7 paragraph 3 GDPR, you have the right to revoke the consent you have given us at any time. As a result, we are no longer allowed to continue data processing based on this consent for the future.

17.10 Automated individual decision-making included in profiling
According to art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing – including profiling – that has legal effect on you or materially affects you in a similar way

17.11 Right to complain to a supervisory authority
According to Art. 77 GDPR you have the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or place of work or the place of the alleged infringement.


18. Links to other websites

We may provide links to third party websites. These linked websites are not under our control and therefore we cannot accept any responsibility or liability for the conduct of third parties linked to our websites. Before disclosing your personally identifiable information on another website, we encourage you to review the website's terms of use and privacy policy.

19. Updating and amending this data protection declaration

This data protection declaration is currently valid and has status of February 2022.

Due to the further development of our website and the provision of it or due to changing legal or official requirements, it may become necessary to amend this data protection declaration. You can access and print the applicable data protection declaration from the Website at any time.